CVE-2024-28882: Openvpn

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session

Affected products

• Openvpn Openvpn: from 2.6.0, before 2.6.11 (fixed in 2.6.11)

Published 2024-07-08. Last modified 2026-06-17.