strongSwan -- multiple vulnerabilitiesentered 2026-09-10
no CVE referenced
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass.
No port is within the affected range.
no CVE referenced