PULSE
ES
FEED
ransomlockbit5 reclama a poolegroup.com.au · AU · Professional Servicesransomlockbit5 reclama a skycc.co.th · TH · Otherransomlockbit5 reclama a kordhotels.gr · GR · Hospitalityransomemperador reclama a MyM ODONTOCLINICA S.A · BR · Healthcareransomaurora reclama a Estrategias BigMat S.L.U. · ES · Retail & E-Commerceransomnightspire reclama a ***o* **s**e** Solutions · Technologyransomdragonforce reclama a Lane Equipment · US · Manufacturingransomn0n reclama a Company #65 · BR · Not Foundransomqilin reclama a The Golden Legacy Financing · Financial Servicesransomhyflock reclama a Ecuador police headquarters · EC · Government & Defenseransomhyflock reclama a merkezilac_archives · TR · Otherransomwallstreet reclama a Ahlqvist & Almqvist Arkitekter AB · SE · Professional Servicesransomwallstreet reclama a Englunds Konsultbyrå AB · SE · Professional Servicesransomwallstreet reclama a Spectrum Arkitekter AB · SE · Professional Servicesransomlockbit5 reclama a poolegroup.com.au · AU · Professional Servicesransomlockbit5 reclama a skycc.co.th · TH · Otherransomlockbit5 reclama a kordhotels.gr · GR · Hospitalityransomemperador reclama a MyM ODONTOCLINICA S.A · BR · Healthcareransomaurora reclama a Estrategias BigMat S.L.U. · ES · Retail & E-Commerceransomnightspire reclama a ***o* **s**e** Solutions · Technologyransomdragonforce reclama a Lane Equipment · US · Manufacturingransomn0n reclama a Company #65 · BR · Not Foundransomqilin reclama a The Golden Legacy Financing · Financial Servicesransomhyflock reclama a Ecuador police headquarters · EC · Government & Defenseransomhyflock reclama a merkezilac_archives · TR · Otherransomwallstreet reclama a Ahlqvist & Almqvist Arkitekter AB · SE · Professional Servicesransomwallstreet reclama a Englunds Konsultbyrå AB · SE · Professional Servicesransomwallstreet reclama a Spectrum Arkitekter AB · SE · Professional Services
← All CVEs
CVE WatchOct 13, 2026

CVE-2026-77207

Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libreswan decodes an IKE C

CVSS

7.5

High

EPSS

—

KEV

—

Exploit Today

0

0-100

Published: Oct 13, 2026 · Last modified: Oct 13, 2026 · CWE-252 · CWE-476

EPSS · 30d

Not enough EPSS history yet.

Technical description

Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509, it guards the PKCS#7 blob with SEC_PKCS7ContainsCertsOrCrls() and then iterates the certificate list with SEC_PKCS7GetCertificateList(). The two NSS APIs disagree on a SignedData that carries a CRL but no certificates: ContainsCertsOrCrls() returns PR_TRUE (there is a CRL), so the guard passes, but GetCertificateList() returns NULL (there are no certificates). This causes libreswan to dereference a null pointer leading to a crash and restart. A malicious IKE_AUTH packet can trigger this bug, meaning the peer does not need to be authenticated. No remote code execution is possible. Continued exploitation can cause a denial of service.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-772067.5 HIG
—
——0Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a fall-through where it incorrectly dereferences ike->sa.st_eap which is NULL. A malicious IKE_AUTH packet can trigger this bug, meaning the peer does not need to be authenticated. The bug results in a crash and restart of the pluto daemon. No remote code execution is possible. Continued exploitation can cause a denial of service.19hCVE-2026-956405.5 MED
—
——0Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.20hCVE-2026-1058965.5 MED
—
——0Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.20hCVE-2026-1038295.5 MED
—
——0Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.20hCVE-2026-1038285.5 MED
—
——0Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.20hCVE-2026-1038265.5 MED
—
——0Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.20h