CVE-2023-32634: Softether VPN

High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days.

An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability.

Affected products

• Softether VPN: version 4.41-9782 only; version 5.01.9674 only

Published 2023-10-12. Last modified 2026-06-17.