CVE-2026-78130 Null dereference in strongSwan

High 7.5 Published 11 Sep 2026 Updated 15 Sep 2026

A NULL pointer dereference in strongSwan's x509 plugin allows attackers to cause a denial of service via crafted attribute certificates.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2026-78130?

CVE-2026-78130 is a high-severity vulnerability in strongSwan, published on 11 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.

Weakness: CWE-476

Which versions are affected by CVE-2026-78130?

It affects 1 product.

Products include Strongswan Strongswan.

How do I fix CVE-2026-78130?

Upgrade to a fixed version.

Is CVE-2026-78130 being exploited?

There is no known exploitation of CVE-2026-78130 in the wild and no public exploit code.

Sources

Also known as AZL-100028, DEBIAN-CVE-2026-78130, GHSA-j374-979j-mcx7, MINI-532x-26rp-7qw9, UBUNTU-CVE-2026-78130.