[UPDATE] [hoch] OpenVPN: Mehrere Schwachstellen

highCVE-2026-11771 CVE-2026-12932 CVE-2026-12996 CVE-2026-13117 CVE-2026-13122 CVE-2026-13698

Ein lokaler Angreifer kann mehrere Schwachstellen in OpenVPN ausnutzen, um beliebigen Programmcode auszuführen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.

CSIRTS triage

vendor: OpenVPN product: OpenVPN Remote code execution Denial of serviceOther

What: Multiple vulnerabilities allow a local attacker to execute arbitrary code, manipulate data, or cause a denial-of-service condition.
Who is affected: Local deployments of OpenVPN are affected by these vulnerabilities.
Urgency: Remediation is urgent due to the high severity of the vulnerabilities, although they are not currently exploited.
Action: Update to the latest version of OpenVPN to mitigate these vulnerabilities.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch OpenVPN

Get an email when a new OpenVPN advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: high
Published: 2026-09-10
Exploitation: Not in CISA KEV at last sync

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2197

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-117710.38% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 30% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-129320.42% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 34% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-129960.46% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 38% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-131170.40% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 33% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-131220.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-136980.31% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 24% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-11771	coverage & exploitation status	NVD · CVE.org
CVE-2026-12932	coverage & exploitation status	NVD · CVE.org
CVE-2026-12996	coverage & exploitation status	NVD · CVE.org
CVE-2026-13117	coverage & exploitation status	NVD · CVE.org
CVE-2026-13122	coverage & exploitation status	NVD · CVE.org
CVE-2026-13698	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for OpenVPN

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

medium[UPDATE] [mittel] OpenVPN: Mehrere Schwachstellencert-bund · 2026-09-10
unknownOpenVPN security advisory (AV26-889)cccs · 2026-09-08
medium[NEU] [mittel] OpenVPN: Mehrere Schwachstellencert-bund · 2026-09-07
unknownCVE-2026-82325: A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 …nvd · 2026-09-07
unknownCVE-2026-84732: Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthentica…nvd · 2026-09-07
unknownCVE-2026-84256: An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.6 on W…nvd · 2026-09-07