How many CVEs does OpenVPN connect have?

OpenVPN connect has 8 published CVE records since 2020.

How many OpenVPN connect CVEs are in CISA KEV?

None of OpenVPN connect's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for OpenVPN connect vulnerabilities?

No OpenVPN connect CVEs currently have a tracked public exploit in this dataset.

Which versions of OpenVPN connect are affected?

27 distinct OpenVPN connect versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in OpenVPN connect CVEs?

OpenVPN connect's CVEs most often map to these CWE weakness types: CWE-95 (Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')), CWE-212 (Improper Removal of Sensitive Information Before Storage or Transfer), CWE-270 (Privilege Context Switching Error), CWE-295 (Improper Certificate Validation).

How many critical OpenVPN connect vulnerabilities are there?

OpenVPN connect has 1 critical and 6 high-severity CVEs.

What is the average severity of OpenVPN connect CVEs?

The average CVSS base score across OpenVPN connect's scored CVEs is 7.6.

OpenVPN connect Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every OpenVPN connect version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.4.0.31211 CVE
< 3.4.0.45061 CVE
< 3.5.01 CVE
<= 3.1.0.3611 CVE
<= 3.2.61 CVE
3.0 <= v < 3.4.31 CVE
3.0 <= v < 3.4.71 CVE
3.0.0 <= v <= 3.0.01 CVE
3.0.0 <= v <= 3.4.61 CVE
3.0.1 <= v <= 3.0.11 CVE
3.0.2 <= v <= 3.0.21 CVE
3.1.0 <= v <= 3.1.01 CVE
3.1.1 <= v <= 3.1.11 CVE
3.1.2 <= v <= 3.1.21 CVE
3.1.3 <= v <= 3.1.31 CVE
3.2.0 <= v < 3.4.41 CVE
3.2.0 <= v < 3.4.81 CVE
3.2.0 <= v <= 3.3.01 CVE
3.5.1 <= v < 3.8.21 CVE

Fixed in

3.4.0.31211 CVE
3.4.0.45061 CVE
3.4.31 CVE
3.4.41 CVE
3.4.71 CVE
3.4.81 CVE
3.5.01 CVE
3.8.21 CVE

Find a version

8 CVEs

Sort

Critical vulnerability · 2026-05-26
CVE-2026-9560
Patch
CWE-270
Critical · CVSS 9.4
EPSS 0.6% (44th pct)2026-05-26
High vulnerability · 2025-01-06
CVE-2024-8474
Patch
CWE-212
High · CVSS 7.5
EPSS 0.5% (42th pct)2025-01-06
High vulnerability · 2024-02-20
CVE-2023-7245
Patch
CWE-95
High · CVSS 7.8
EPSS 0.3% (24th pct)2024-02-20
High vulnerability · 2024-01-08
CVE-2023-7224
Patch
CWE-95
High · CVSS 7.8
EPSS 0.2% (15th pct)2024-01-08
Medium vulnerability · 2023-10-17
CVE-2022-3761
Patch
CWE-295
Medium · CVSS 5.9
EPSS 0.8% (54th pct)2023-10-17
High vulnerability · 2021-07-02
CVE-2021-3613CWE-427
High · CVSS 7.8
EPSS 0.8% (52th pct)2021-07-02
High vulnerability · 2021-03-30
CVE-2020-15075CWE-61
High · CVSS 7.1
EPSS 0.3% (21th pct)2021-03-30
High vulnerability · 2020-02-28
CVE-2020-9442
High · CVSS 7.8
EPSS 0.6% (47th pct)2020-02-28

OpenVPN connect Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other OpenVPN products

Frequently asked questions

References

Track OpenVPN connect vulnerabilities