Sploitus

45 exploited vulnerabilities in Openvpn

Vulnerabilities with publicly known exploits

Vendors
Alt Linux, Openvpn, Red Os, Canonical, Astra Linux, Debian
With known exploits
45
Affected Openvpn versions
< 2.5.10, 2.6.10, 2.6.6, 2.4.12, 2.5.6, 2.6.21, 2.7.5, 2.6.13, 2.7, 2.5.11, 2.6.11, 2.4.5, 2.4.6, 2.6.16, 2.3.12, 2.3.13, 2.3.14, 2.4.0, 2.4.1, 2.6.20, 2.7.2, 2.8.3, 2.3.0, 1.2.0, 1.2.1, 1.3.0, 1.3.1, 1.3.2, 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.5.0, 1.6.0, 2.1.0, 2.2.0
Affected Openvpn Openvpn Access Server versions
≤ 2.11.3, 2.12.2, 2.12.0, 2.12.1, 2.0.0
Affected Apache Http Server versions
≤ 2.2.14
Affected Gnu Gnutls versions
≤ 2.8.5
Affected Mozilla Nss versions
≤ 3.12.4
Affected Openssl versions
≤ 0.9.8k, 1.0
Affected Wavlink wl-wn533a8 Firmware versions
= m33a8.v5030.210505
Affected Netgate Pfsense Ce versions
< 2.8.0

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2024-27903
CVSS 9.8 CRITICAL 2024-03-20
CVE-2023-46850
CVSS 9.8 CRITICAL 2023-11-10
CVE-2022-0547
CVSS 9.8 CRITICAL 2022-03-18FIX AVAILABLE
CVE-2009-3555 16 exploits
CVSS 9.8 CRITICALFIX AVAILABLE
CVE-2026-13117
CVSS 8.1 HIGH 2026-07-01
CVE-2025-12106
CVSS 9.1 CRITICAL 2025-12-01FIX AVAILABLE
CVE-2026-13379
CVSS 9.1 CRITICAL 2026-07-30FIX AVAILABLE
CVE-2026-11771
CVSS 7.5 HIGH 2026-07-02
CVE-2026-13698
CVSS 7.5 HIGH 2026-07-06
CVE-2024-39800
CVSS 9.1 CRITICAL 2025-01-14
CVE-2024-39799
CVSS 9.1 CRITICAL 2025-01-14
CVE-2024-39798
CVSS 9.1 CRITICAL 2025-01-14
CVE-2024-38666
CVSS 9.1 CRITICAL 2025-01-14
CVE-2024-5594
CVSS 9.1 CRITICAL 2024-05-14FIX AVAILABLE
CVE-2018-7544
CVSS 9.1 CRITICAL 2018-03-16
CVE-2024-54780
CVSS 8.8 HIGH 2024-11-15FIX AVAILABLE
CVE-2020-27648
CVSS 9.0 CRITICAL 2020-10-29FIX AVAILABLE
CVE-2020-27649
CVSS 9.0 CRITICAL 2020-10-29FIX AVAILABLE
CVE-2019-14657
CVSS 9.0 HIGH 2019-10-08
CVE-2024-4877
CVSS 8.8 HIGH 2024-05-14FIX AVAILABLE
CVE-2026-12996
CVSS 8.1 HIGH 2026-07-02
CVE-2026-12932
CVSS 8.1 HIGH 2026-07-02
CVE-2018-10066
CVSS 8.1 HIGH 2018-04-13
CVE-2024-27459
CVSS 7.8 HIGH 2024-03-24
CVE-2024-24974
CVSS 7.5 HIGH 2024-03-24
CVE-2023-46849
CVSS 7.5 HIGH 2023-11-10
CVE-2019-12578
CVSS 7.8 HIGH 2019-07-11
CVE-2018-9336
CVSS 7.8 HIGH 2018-05-01FIX AVAILABLE
CVE-2018-11479 4 exploits
CVSS 7.8 HIGH 2018-05-25
CVE-2025-13086
CVSS 8.2 HIGH 2025-11-17FIX AVAILABLE
CVE-2025-2704
CVSS 7.5 HIGH 2025-04-02FIX AVAILABLE
CVE-2017-7478 3 exploits
CVSS 7.5 HIGH 2017-05-15FIX AVAILABLE
CVE-2026-40215
CVSS 7.4 HIGH 2026-04-23FIX AVAILABLE
CVE-2024-28730
CVSS 5.4 MEDIUM 2024-11-10FIX AVAILABLE
CVE-2019-12573 1 exploit
CVSS 7.1 HIGH 2019-07-11FIX AVAILABLE
CVE-2026-35058
CVSS 6.9 MEDIUM 2026-04-20
CVE-2026-31893
CVSS 6.8 MEDIUM 2026-05-05FIX AVAILABLE
CVE-2026-11604
CVSS 6.5 MEDIUM 2026-06-10
CVE-2026-13122
CVSS 5.9 MEDIUM 2026-07-06
CVE-2013-2061
CVSS 2.6 LOW 2013-11-15FIX AVAILABLE
CVE-2025-13751
CVSS 5.6 MEDIUM 2025-11-28FIX AVAILABLE
CVE-2025-50054
CVSS 5.5 MEDIUM 2025-06-17FIX AVAILABLE
CVE-2024-28882
CVSS 4.3 MEDIUM 2024-06-25
CVE-2020-11810
CVSS 4.3 MEDIUM 2020-04-17FIX AVAILABLE
CVE-2024-5198
CVSS 3.3 LOW 2025-01-15