CVE-2026-84732
Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow
- Published Sep 7, 2026
- CVSS 8.7 high
- 0.5% chance of exploitation in the next 30 days (EPSS)