SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-78043

MEDIUM · CVSS 5.6 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-07 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability in OpenVPN affects the Windows Interactive Service, allowing local authenticated users to bypass security constraints and load arbitrary configuration files through specially crafted paths. This could lead to unauthorized access or manipulation of the VPN configuration, potentially compromising the integrity of the VPN service. Organizations using affected versions of OpenVPN on Windows should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2026-78043
Severity
MEDIUM
CVSS
5.6
EPSS
0.17%
Windows

Original NVD Description

The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths