openwrt ▾
›
openwrt-25.12 ▾
›
vulnerability
›
CVE-2026-78131
Component Overview
Vulnerability Overview
Name
CVE-2026-78131
Source
NVD (
link
)
Debian (
link
)
Description
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser.
CWEs
CWE-401
Published Date
Sep 11, 2026
Updated Date
Sep 14, 2026
Workaround
-
Advisories
https://github.com/strongswan/strongswan/releases/tag/6.1.0
Patch
https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78131).html
Mitigation
Analysis
#
Affected Component
Analysis
strongswan
Exploitable
Vulnerability Ratings
#
3.7
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
strongswan
buildroot
2025.02.x
5.9.14
Exploitable
strongswan
buildroot
master
6.0.5
Exploitable
strongswan
openwrt
master
6.0.7-r9
Exploitable
strongswan
yocto
kirkstone
5.9.13
Exploitable
strongswan
yocto
master
6.0.7
Exploitable
strongswan
yocto
scarthgap
5.9.14
Exploitable