CVE-2026-78126

Description

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.

References

• https://github.com/strongswan/strongswan/releases/tag/6.1.0
• https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78126).html