CVE-2026-115402

Quick assessment

Affected

OpenVPN ovpn-dco-win

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

OpenVPN ovpn-dco-win 0.6.5 至 2.8.13 版本允许非特权本地用户通过 TCP 连接路径中的竞态条件，引发拒绝服务（系统崩溃）。

CVSS 5.7 · Medium Updated Oct 28, 2026

Possible ATT&CK Techniques 1 AI

T1068.011

Affected Version Matrix 1

Vendor	Product	Version Range	Status
OpenVPN	ovpn-dco-win	`0.6.5≤ 2.8.13`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect path.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Source: CVE Program / CVE List V5

Vulnerability Type

使用共享资源的并发执行不恰当同步问题(竞争条件)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
OpenVPN	ovpn-dco-win	0.6.5 ~ 2.8.13	-

II. Public POCs for CVE-2026-115402

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-115402

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-115402 (1)

🔗 CVE-2026-115402 – community wiki vendor-advisory

https://www.cve.org/CVERecord?id=CVE-2026-115402

IV. Related Vulnerabilities

Same product: ovpn-dco-win

Same vendor: OpenVPN

Same weakness: CWE-362