CVE-2026-48131 — VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero
The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to ter…
Published: 2026-05-26 · CVSS: 8.1 · CVSS 3.1
The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to terminate unexpectedly, resulting in denial of service (temporary disruption of VPN-related functionality).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7