CVE Intelligence

Softether vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Softether products: 1 record(s), with severity, exploitation and fixes.

Softethervpn 1

Exploited only (KEV) →

CVE-2026-39312 High · 7.5 CWE-789 Apr 7, 2026
Pre-Auth EAP-TLS DoS on SoftEther VPN Developer Edition
SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. In 5.2.5188 and earlier, a pre-authentication denial-of-service vulnerability exists in SoftEther VPN Developer Edition 5.2.5188 (and likely earlier versions of Developer Edition). An unauthenticated remote attacker can crash the vpnserver process by sending a single malformed EAP-TLS packet over raw L2TP (UDP/1701), terminating all active VPN sessions.