CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine.

Strongswan

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass.

11. Sep 2026

Ausgewertete Quellen

• Hersteller
  https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78135).html
• NVD
  CVE-2026-78135
• GitHub
  https://github.com/strongswan/strongswan/releases/tag/6.1.0