Search: CVE-2026-77205

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	3.7	EPSS 0.2%	CVE-2026-77205libreswan · Missing Release of Resource after Effective Lifetime Low3.7EPSS 0.2%2026-10-13CVE Database V5CVE-2026-77205 Libreswan versions 5.3 through 5.3.2 running in FIPS mode have a vulnerability where malformed certificates are rejected but not removed from the NSS cache. This causes legitimate certificates with the same serial number to be rejected, potentially locking out legitimate peers until the service restarts. The issue stems from a missing call to CERT_DestroyCertificate() in the add_decoded_cert() function, related to an incorrect fix for a previous vulnerability (CVE-2026-14957). EPSS 0.2%Vulnerability The Libreswan Project CWE-772	CVE Database V5	2026-10-13

Page 1 of 1 · 1 duplicate CVE record merged