7.5 HighCWE-415
CVE-2026-47895
strongSwan vulnerability
Status
- Not in CISA KEV
- Fixed in version 6.0.7
Exploit probabilityEPSSchecked 25 Oct
0.4%probability of exploitation in the next 30 days
Higher than 36% of scored CVEs
SeverityCVSS
7.5High
Description NVD
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
Coverage 1 article · 1 outlet
- CVE-2026-47895 exposes strongSwan VPN to remote code executionSecurityOnline · first in our coverage