yocto ▾
›
master ▾
›
vulnerability
›
CVE-2026-78130
Component Overview
Vulnerability Overview
Name
CVE-2026-78130
Source
NVD (
link
)
Debian (
link
)
Description
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.
CWEs
CWE-476
Published Date
Sep 11, 2026
Updated Date
Sep 15, 2026
Workaround
-
Advisories
https://github.com/strongswan/strongswan/releases/tag/6.1.0
Patch
https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78130).html
Mitigation
Analysis
#
Affected Component
Analysis
strongswan
Exploitable
Vulnerability Ratings
#
7.5
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
strongswan
buildroot
2025.02.x
5.9.14
Exploitable
strongswan
buildroot
master
6.0.5
Exploitable
strongswan
openwrt
master
6.0.7-r9
Exploitable
strongswan
openwrt
openwrt-25.12
6.0.7-r1
Exploitable
strongswan
yocto
kirkstone
5.9.13
Exploitable
strongswan
yocto
scarthgap
5.9.14
Exploitable