{"id":"CVE-2026-77205","published":"2026-10-13T22:18:24.577","lastModified":"2026-10-16T19:55:59.740","description":"Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same serial number are rejected as well. This can be abused to lock out legitimate peers from connecting. The add_decoded_cert() function missed a call to CERT_DestroyCertificate() due to an incorrect fix for CVE-2026-14957. Sending bogus certificates with new serial numbers could prevent the real certificates with those serial numbers from connecting until the service has restarted.","cvssScore":3.7,"cvssSeverity":"LOW","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwes":["CWE-772"],"vendors":[],"products":[],"references":[{"url":"https://libreswan.org/security/CVE-2026-14957/CVE-2026-14957.txt","tags":[]},{"url":"https://libreswan.org/security/CVE-2026-77205/","tags":[]},{"url":"https://libreswan.org/security/CVE-2026-77205/CVE-2026-77205.txt","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}