CVE Tools
Sign in
Back to feed
PoC public strongSwan ddos-botnet network-edge

strongSwan CVE-2026-25075: Integer Underflow in VPN Authentication

Bishop Fox·By Jon Williams··10 min read
TL;DR

Bishop Fox researchers took a deep dive into a new strongSwan vulnerability that allows unauthenticated attackers to take VPN services offline, with the bug impacting versions going back over 15 years. Exposure is likely anywhere EAP-TTLS is enabled. We created an easy tool to test your strongSwan deployment & recommend upgrading to version 6.0.5 and later.…

Continue reading on Bishop Fox

Related coverage

Other stories on the same CVEs
No other coverage for these CVEs yet.
Worried this affects your company?

See what your business actually exposes to the Internet — a free external review, no install, no obligation.

Check my exposure