Question 1

What is CVE-2026-63650 — CVE-2026-63650?

Accepted Answer

OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field

Question 2

What is the authoritative source for CVE-2026-63650?

Accepted Answer

CVE-2026-63650 (CVE-2026-63650) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-63650CVE-2026-63650

Description

Scoring