OpenVPN security advisory (AV26-889)

Serial Number: AV26-889
Date: September 8, 2026

As of September 7, 2026, OpenVPN is affected by vulnerabilities in the following product:

• OpenVPN
  • Prior to or equal to 2.6.22
  • Prior to or equal to 2.7.6

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• CVE-2026-84732 - Reliability layer unbounded TLS timeout and acks for non-outstanding packets
• Security Advisories & Updates | OpenVPN