Sploitus

37 exploited vulnerabilities in Openvpn

Vulnerabilities with publicly known exploits

Vendors
Alt Linux, Openvpn, Debian, Linux Mint, Red Os, Canonical
With known exploits
37
Affected Openvpn versions
< 2.5.10, 2.6.10, 2.6.16, 2.7, 2.6.13, 2.6.6, 2.4.12, 2.5.6, 2.6.11, 2.4.5, 2.4.6, 2.5.11, 2.6.21, 2.7.5, 2.3.12, 2.3.13, 2.3.14, 2.4.0, 2.4.1, 2.3.0, 1.2.0, 1.2.1, 1.3.0, 1.3.1, 1.3.2, 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.5.0, 1.6.0, 2.1.0, 2.2.0, 2.6.17, 2.4.9
Affected Openvpn Openvpn Access Server versions
≤ 2.11.3, 2.12.2, 2.12.0, 2.12.1, 2.0.0
Affected Apache Http Server versions
≤ 2.2.14
Affected Gnu Gnutls versions
≤ 2.8.5
Affected Mozilla Nss versions
≤ 3.12.4
Affected Openssl versions
≤ 0.9.8k, 1.0
Affected Wavlink wl-wn533a8 Firmware versions
= m33a8.v5030.210505
Affected Netgate Pfsense Ce versions
< 2.8.0

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2024-27903
CVSS 10.0 CRITICAL 2024-03-20
CVE-2025-13086
CVSS 9.8 CRITICAL 2025-11-17FIX AVAILABLE
CVE-2025-2704
CVSS 9.8 CRITICAL 2025-04-02FIX AVAILABLE
CVE-2023-46850
CVSS 9.8 CRITICAL 2023-11-10
CVE-2022-0547
CVSS 9.8 CRITICAL 2022-03-18FIX AVAILABLE
CVE-2009-3555 15 exploits
CVSS 9.8 CRITICAL 1970-01-01FIX AVAILABLE
metasploitable-vulnerability-mapping-with-nmapExploit for Improper Certificate Validation in Apache Http_Server
CVE-2025-12106
CVSS 9.4 CRITICAL 2025-12-01FIX AVAILABLE
CVE-2024-5594
CVSS 9.4 CRITICAL 2024-05-14FIX AVAILABLE
CVE-2024-39800
CVSS 9.1 CRITICAL 2025-01-14
CVE-2024-39799
CVSS 9.1 CRITICAL 2025-01-14
CVE-2024-39798
CVSS 9.1 CRITICAL 2025-01-14
CVE-2024-38666
CVSS 9.1 CRITICAL 2025-01-14
CVE-2018-7544
CVSS 9.1 CRITICAL 2018-03-16
CVE-2024-54780
CVSS 9.0 HIGH 2024-11-15FIX AVAILABLE
CVE-2020-27648
CVSS 9.0 CRITICAL 2020-10-29FIX AVAILABLE
CVE-2020-27649
CVSS 9.0 CRITICAL 2020-10-29FIX AVAILABLE
CVE-2019-14657
CVSS 9.0 HIGH 2019-10-08
CVE-2024-4877
CVSS 8.8 HIGH 2024-05-14FIX AVAILABLE
CVE-2018-10066
CVSS 8.1 HIGH 2018-04-13
CVE-2024-27459
CVSS 7.8 HIGH 2024-03-24
CVE-2024-24974
CVSS 7.8 HIGH 2024-03-24
CVE-2023-46849
CVSS 7.8 HIGH 2023-11-10
CVE-2019-12578
CVSS 7.8 HIGH 2019-07-11
CVE-2018-9336
CVSS 7.8 HIGH 2018-05-01FIX AVAILABLE
CVE-2018-11479 4 exploits
CVSS 7.8 HIGH 2018-05-25
Windscribe - WindscribeService Named Pipe Privilege Escalation (Metasploit)Windscribe VPN WindscribeService Named Pipe Privilege Escalation Exploit
CVE-2026-13698
CVSS 7.5 HIGH 2026-07-06
CVE-2017-7478 3 exploits
CVSS 7.5 HIGH 2017-05-15FIX AVAILABLE
OpenVPN 2.4.0 Denial Of ServiceOpenVPN 2.4.0 - Denial of Service
CVE-2024-28730
CVSS 7.2 HIGH 2024-11-10FIX AVAILABLE
CVE-2019-12573
CVSS 7.1 HIGH 2019-07-11FIX AVAILABLE
CVE-2026-31893
CVSS 6.8 MEDIUM 2026-05-05FIX AVAILABLE
CVE-2026-13122
CVSS 5.9 MEDIUM 2026-07-06
CVE-2013-2061
CVSS 5.8 MEDIUM 2013-11-15FIX AVAILABLE
CVE-2025-13751
CVSS 5.5 MEDIUM 2025-11-28FIX AVAILABLE
CVE-2025-50054
CVSS 5.5 MEDIUM 2025-06-17FIX AVAILABLE
CVE-2024-28882
CVSS 4.3 MEDIUM 2024-06-25
CVE-2020-11810
CVSS 4.3 MEDIUM 2020-04-17FIX AVAILABLE
CVE-2024-5198
CVSS 3.3 LOW 2025-01-15