CVE-2025-11955
NoneCVSS
—
EPSS
0.2%
Published
Oct 27, 2025
CISA due date
—
The record
Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5 and 7.6. During the IKEv2 authentication step, the OCSP-enabled VPN client establishes the tunnel even if it does not receive an OCSP response or if the OCSP response signature is invalid.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-86231 A security flaw has been discovered in mwiede jsch up to 2.28.5. CWE-299
- CVE-2026-61699 nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. CWE-299
- CVE-2026-56821 Netty is an asynchronous, event-driven network application framework. CWE-299
- CVE-2026-6899 Check for certificate revocation only considers the first matching CRL and ignores other… CWE-299
- CVE-2026-4428 A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes… CWE-299