TheGreenBow vulnerabilities

🔔 Create alert RSS

Published CVEs affecting TheGreenBow products: 1 record(s), with severity, exploitation and fixes.

TheGreenBow VPN Client Windows Enterprise 1

Exploited only (KEV) →

CVE-2025-11955 High · 8.2 CWE-299 Oct 27, 2025

Incorrect validation of OCSP certificates in TheGreenBow VPN Client Windows Enterprise

Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5 and 7.6. During the IKEv2 authentication step, the OCSP-enabled VPN client establishes the tunnel even if it does not receive an OCSP response or if the OCSP response signature is invalid.