Search: CVE-2026-77207

CVE-2026-77207 is a high-severity vulnerability in Libreswan affecting versions 4.7 through 5.3.2 and 5.4 through 5.4. It involves a null pointer dereference in the PKCS#7 handling code during IKE certificate authentication. This flaw can be triggered by a malicious IKE_AUTH packet without requiring peer authentication, causing the Libreswan process to crash and restart, resulting in a denial of service. No remote code execution or data compromise is possible.