Sploitus

11 exploited vulnerabilities in Strongswan

Vulnerabilities with publicly known exploits

Vendors
Alt Linux, Astra Linux, Linux Mint, Red Os, Suse, Canonical
With known exploits
11
Affected Strongswan versions
< 5.9.12, 5.9.8, 5.9.9, 5.9.4, 5.9.6, 4.1.11
Affected Strongswan Strongman versions
= 0.1.0

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2023-41913
CVSS 9.8 CRITICAL 2023-11-20FIX AVAILABLE
CVE-2023-26463
CVSS 9.8 CRITICAL 2023-03-03FIX AVAILABLE
CVE-2026-25075 2 exploits
CVSS 8.7 HIGH 2026-01-01FIX AVAILABLE
📄 strongSwan 4.5.0 EAP-TTLS Integer UnderflowExploit for CVE-2026-25075
CVE-2026-25998
CVSS 8.7 HIGH 2026-02-18FIX AVAILABLE
CVE-2025-62291
CVSS 8.1 HIGH 2025-01-01FIX AVAILABLE
CVE-2022-40617
CVSS 7.8 HIGH 2022-10-03FIX AVAILABLE
CVE-2021-41991
CVSS 7.8 HIGH 2021-10-18FIX AVAILABLE
CVE-2022-4967
CVSS 7.7 HIGH 2024-05-13FIX AVAILABLE
CVE-2013-5018
CVSS 5.1 MEDIUM 2013-08-28FIX AVAILABLE
CVE-2026-35333 3 exploits
2026-04-22
strongSwan 5.9.13 - DoS📄 strongSwan 5.9.13 Denial of Service
CVE-2026-35330 3 exploits
2026-04-22
strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow📄 strongSwan 5.9.13 Buffer Overflow