{"id":"CVE-2026-84471","published":"2026-10-14T15:17:26.077","lastModified":"2026-10-16T16:21:51.633","description":"The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://community.openvpn.net/Security%20Announcements/CVE-2026-84471","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}