l
libreswan
Security Risk Profile
35
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 37 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 6, 2013 to present
37
Total CVEs
22
Critical+High
0
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
35/100
low
📈 7 in Last 30 Days
Severity Distribution
Critical
1High
21Medium
12Low
3Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Null Pointer Dereference
10
2
Input Validation
4
3
Buffer Overflow
2
4
Use After Free
1
5
Race Condition
1
Most Affected Products
1. alpine/libreswan92
2. libreswan Libreswan58
3. debian/libreswan53
4. Fedoraproject Fedora8
5. redhat/libreswan6
Recent Vulnerabilities
See more →CVE-2026-77207
CVSS 7.5high
Null Pointer Dereference in PKCS#7 bundle with no certificates
Oct 13, 2026
REDHAT-BUG-2550258
CVSS 4.0medium
Oct 13, 2026🔧 No Patch
CVE-2026-77206
CVSS 7.5high
IKEv2 pre-authentication Null Pointer Dereference in EAP code
Oct 13, 2026
REDHAT-BUG-2550256
CVSS 4.0medium
Oct 13, 2026🔧 No Patch
CVE-2026-77205
CVSS 3.7low
Denial of Service via sending bogus X.509 certificates
Oct 13, 2026
REDHAT-BUG-2550255
CVSS 1.0low
Oct 13, 2026🔧 No Patch
CVE-2026-94453
CVSS 7.5high
IKEv2 Use-After-Free bug when using IKE-over-TCP
Oct 13, 2026
CVE-2026-14957
CVSS 7.5high
FIPS mode assertion failure via malicious CERT payload
Jul 17, 2026
REDHAT-BUG-2501764
CVSS 4.0medium
Jul 17, 2026🔧 No Patch
CVE-2026-12413
CVSS 7.5high
IKEv2 Denial of Service via malformed fragmentation
Jun 29, 2026
Monitor libreswan in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.