{"id":"CVE-2026-106017","published":"2026-10-22T10:17:07.887","lastModified":"2026-10-22T15:25:35.333","description":"Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-295"],"vendors":[],"products":[],"references":[{"url":"https://community.openvpn.net/Security%20Announcements/CVE-2026-106017","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}