strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow
Source Exploit-DB RSS Feed
Public exploit available (Exploit-DB).
Data as of 10 Aug 2026, 21:19 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
Exploitation evidence
Disclosed: evidence found.
Public on cve.org; its publication date is not in this record
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: evidence found.
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.
What to do
AI-suggested
Until an official fix is released, consider restricting access to the vulnerable service or applying any available workarounds recommended by the vendor.
Description
strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow
Indicators of compromise
Exploit source code
* Exploit Title: strongSwan 5.9.13 - heap buffer overflow
* Date: 2026-05-13
* Exploit Author: Lukas Johannes Moeller
* Vendor Homepage: https://www.strongswan.org/
* Software Link: https://download.strongswan.org/strongswan-5.9.13.tar.bz2
* Version: strongSwan <= 5.9.13 (eap-sim or eap-aka plugin built)
* Tested on: Debian 12 bookworm, libsimaka.so.0.0.0 + libstrongswan.so.0.0.0
* from upstream strongswan-5.9.13 tarball (no distro patches).
* CVE: CVE-2026-35330
* Referenc…