CVE-2026-78131

Description

strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser.

References

• https://github.com/strongswan/strongswan/releases/tag/6.1.0
• https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78131).html