Question 1

What is CVE-2026-63649 — CVE-2026-63649?

Accepted Answer

The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via crafted options that bypass whitelist checks

Question 2

What is the authoritative source for CVE-2026-63649?

Accepted Answer

CVE-2026-63649 (CVE-2026-63649) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-63649CVE-2026-63649

Description

Scoring