CVE-2026-84732: Openvpn

High severity, CVSS 8.7. EPSS: 0.5% chance of exploitation in the next 30 days.

Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow

Affected products

• Openvpn Openvpn: up to and including 2.6.22; up to and including 2.7.6

Published 2026-09-07. Last modified 2026-09-08.