CVE-2026-78043

Published on Sep 7, 2026

The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths

Weakness type (CWE)CWE-22

Vulnerabilities

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle

FortiMail path traversal and NetScaler SAML flaw under active exploit join CISA KEV, forcing urgent patching plus PHP, PaperCut and Spectre fixes.

Oct 5, 202619:36 7 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle