CVE-2026-78130

Description

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.

References

• https://github.com/strongswan/strongswan/releases/tag/6.1.0
• https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78130).html