Multiple vulnerabilities in StrongSwan

Advisory ID CVE Number Date discovered Severity Advisory revision
STORM-2026-028 CVE-2026-78123 , CVE-2026-78124 , CVE-2026-78129 , CVE-2026-78130 , CVE-2026-78131 , CVE-2026-78135 09/11/2026 medium v2

Vulnerability details

Some security flaws have been identified in StrongSwan, a component used in SNS appliances to create IPsec tunnels.

Impacted products

ProductsSeverityDetail
Stormshield Network Security medium SNS is impacted.

Revisions

Version Date Description
v1 10/16/2026 Initial release
v2 10/20/2026 Advisory disclosure


Stormshield Network Security

CVSS v3.1 Overall Score: 5.4      

Analysis

Impacted version

An attacker could exploit these vulnerabilities to cause a denial of the VPN service, or memory leaks.

 
  • SNS 5.1.0 to 5.1.3
  • SNS 5.0.0 to 5.0.9
  • SNS 4.8.0 to 4.8.19
  • SNS 4.3.0 to 4.3.44

Workaround solution

Solution

CVE-2026-78123, CVE-2026-78124, CVE-2026-78129 :

  • SNS appliances that don’t accept IKEv1 connections are not vulnerable.

CVE-2026-78135 :

  • SNS appliances that don’t accept EAP authentication are not vulnerable.

 

The following updates will fix this vulnerability:

  • SNS 5.1.4 EA
  • SNS 5.0.10
  • SNS 4.8.20 LTSB
  • SNS 4.3.45 QS


Attack Vector Attack Complexity Privileges Required User Interaction Scope Confidentiality Impact Integrity Impact Availability impact
Network Low None None Unchanged Low None Low
CVSS Base score: 6.5 CVSS Vector: (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Exploit Code Maturity Remediation Level Report Confidence
Unproven that exploit exists Official fix Confirmed
CVSS Temporal score: 5.7 CVSS Vector: (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C)
Attack Vector (MAV) Attack Complexity (MAC) Privileges Required (MPR) User Interaction (MUI) Scope (MS)
Network Low None None Unchanged
Confidentiality Impact (MC) Integrity Impact (MI) Availability Impact (MA)
Low None High
Confidentiality Requirement (CR) Integrity Requirement (IR) Availability Requirement (AR)
Low Low Low
CVSS Environmental score: 5.4 CVSS Vector: (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C/CR:L/IR:L/AR:L/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:L/MI:N/MA:H)