CVE-2026-84790
OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field
CVSS
—
No CVSS
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Oct 13, 2026 · Last modified: Oct 13, 2026 · CWE-158 · CWE-290
Not enough EPSS history yet.
OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-838645.5 MED—
——0Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.11hCVE-2026-838458.4 HIG—
——0Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.9hCVE-2026-75120——
——0The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment12hCVE-2026-701797.5 HIG—
——0Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.11hCVE-2026-1081317.5 HIG—
——0No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.12hCVE-2026-1050089.0 CRI—
——0No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.12h