Question 1

What is CVE-2026-106017 — CVE-2026-106017?

Accepted Answer

Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.

Question 2

What is the authoritative source for CVE-2026-106017?

Accepted Answer

CVE-2026-106017 (CVE-2026-106017) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-106017CVE-2026-106017

Description

Scoring