openwrt ▾
›
openwrt-25.12 ▾
›
vulnerability
›
CVE-2026-78133
Component Overview
Vulnerability Overview
Name
CVE-2026-78133
Source
NVD (
link
)
Debian (
link
)
Description
libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.
CWEs
CWE-416
Published Date
Sep 11, 2026
Updated Date
Sep 14, 2026
Workaround
-
Advisories
https://github.com/strongswan/strongswan/releases/tag/6.1.0
Patch
https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78133).html
Mitigation
Analysis
#
Affected Component
Analysis
strongswan
Exploitable
Vulnerability Ratings
#
7.5
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
strongswan
buildroot
2025.02.x
5.9.14
Not Affected
strongswan
buildroot
master
6.0.5
Exploitable
strongswan
openwrt
master
6.0.7-r9
Exploitable
strongswan
yocto
kirkstone
5.9.13
Not Affected
strongswan
yocto
master
6.0.7
Exploitable
strongswan
yocto
scarthgap
5.9.14
Not Affected