PT-2026-89742

CVE-2026-78135

·

Published

2026-09-07

·

Updated

2026-10-08

Description by

CVSS 3.1
7.3
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions strongSwan versions 5.9.7 through 6.0.7
Description The libcharon component mishandles the behavioral workflow within the IKEv2 state machine. This improper handling of CREATE CHILD SA requests can lead to an authentication bypass.
Recommendations Update strongSwan to version 6.1.0-1.1 or later.
Exploitability
Exploit
Fix
Vendors
Affected products
Weakness enumeration
CWE-841: Improper Enforcement of Behavioral Workflow
Related identifiers
CVE-2026-78135
AZL-100049
OPENSUSE-SU-2026:11749-1
OPENSUSE-SU-2026:22050-1
SUSE-SU-2026:24199-1
SUSE-SU-2026:4115-1
SUSE-SU-2026:4146-1
USN-8789-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com