SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-81830

MEDIUM · CVSS 5.6 EPSS 0.11%

Source: NVD + CISA KEV + EPSS · Published 2026-09-07 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability in OpenVPN affects the Windows interactive service, allowing local authenticated users to bypass the trusted configuration directory constraint due to improper file path validation. This could lead to unauthorized access or manipulation of sensitive configurations, potentially compromising the security of the VPN service. Organizations using affected versions of OpenVPN on Windows should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2026-81830
Severity
MEDIUM
CVSS
5.6
EPSS
0.11%
Windows

Original NVD Description

The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation