CVE-2026-81738

The tap-windows6 driver in OpenVPN versions 2.5.0 to 2.7.6 on Windows is vulnerable to an out-of-bounds write triggered by specially crafted DOMAIN-SEARCH entries. While the CVSS score is low, this vulnerability could potentially be exploited to cause instability or unauthorized access to system memory. Organizations using these versions of OpenVPN should prioritize patching to mitigate any risks associated with this vulnerability.