PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-78130 strongSwan CVE debrief

A NULL pointer dereference vulnerability exists in the x509 plugin's attribute certificate parser of strongSwan versions 4.2.0 through 6.0.7. This issue could potentially lead to a denial-of-service (DoS) condition if exploited. The vulnerability is considered high-severity, with a CVSS score of 7.5, and defenders should assess exposure and prioritize mitigation or patching. The CVE record and NVD entry provide details about the vulnerability, including its CVSS score and potential impact. However, additional information about exploitation or affected systems is limited. To address this vulnerability, defenders should review and update strongSwan to a version outside the affected 4

Vendor
strongSwan
Product
Unknown
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-11
Original CVE updated
2026-09-11
Advisory published
2026-09-11
Advisory updated
2026-09-11

Who should care

Defenders responsible for strongSwan installations, especially in environments where secure communication is critical, should assess exposure and prioritize mitigation or patching.

Why it matters

CVE-2026-78130 is a high-severity vulnerability in strongSwan that could lead to a DoS condition. Defenders should assess exposure, prioritize patching, and monitor for potential service disruptions.

  • Potential DoS condition due to NULL pointer dereference
  • Need for patching or mitigation to prevent potential service disruption
  • Importance of verifying strongSwan version and exposure

Technical summary

The x509 plugin's attribute certificate parser in strongSwan versions 4.2.0 through 6.0.7 contains a NULL pointer dereference vulnerability. This issue could lead to a denial-of-service (DoS) condition if a specially crafted certificate is processed.

Defensive priority

Defenders should prioritize patching or mitigating this vulnerability, especially in environments where strongSwan is used for secure communication.

Recommended defensive actions

  • Assess exposure and prioritize patching for strongSwan installations
  • Review and update strongSwan to a version outside the affected range if possible
  • Monitor for potential DoS conditions in environments where strongSwan is used

Evidence notes

The CVE record and NVD entry provide details about the vulnerability, including its CVSS score and potential impact. However, additional information about exploitation or affected systems is limited.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-78130 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-78130

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-78130 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-78130

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.