CVE Field Guide
About Us
CVE-2026-78129
PUBLISHED
Assigner:
mitre
Reserved:
22.08.2026
Published:
11.09.2026
Updated:
11.09.2026
strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Score:
5.9
CVSS score
5.9
Attack Vector
Network
Scope
Unchanged
Attack Complexity
High
Confidentiality Impact
None
Privileges Required
None
Integrity Impact
None
User Interaction
None
Availability Impact
High
CVSS 3.1
Product Status
Vendor
strongSwan
Product
strongSwan
Versions
Default:
unaffected
affected from 4.6.2 to 6.1.0 (excl.)
References
https://github.com/strongswan/strongswan/releases/tag/6.1.0
https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78129).html
Problem Types
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')
CWE