Integer overflow in Openvpn
CVE-2026-84732
Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow
Vulnerability class: Integer Overflow
Affected products
Weakness classification (CWE)
References
- security@openvpn.net (vendor-advisory)