CVE-2026-2738: Openvpn Ovpn-Dco-Win

Medium severity, CVSS 5.6. EPSS: 0.1% chance of exploitation in the next 30 days.

Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag appears at the end of the encrypted packet

Affected products

• Openvpn Ovpn-Dco-Win: version 2.8.0 only

Published 2026-02-19. Last modified 2026-06-17.