CVE-2026-78132 | CyberRota

CyberRota Analysis

AI-Generated

The x509 plugin in strongSwan versions 5.1.3 to 6.0.7 contains a vulnerability that can lead to an infinite loop when processing certain attribute certificates, potentially causing denial of service. Organizations utilizing strongSwan for VPN services should prioritize patching this vulnerability to prevent service disruptions and ensure the integrity of their secure communications.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE

CVE-2026-78132

Severity

HIGH

CVSS

7.5

EPSS

0.31%

Original NVD Description

strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.