CVE-2023-46850CWE-416

CVE-2023-46850: vulnerability in OpenVPN Access Server

Published · Updated

Follow this CVE+ Monitor Access Server+ Monitor OpenVPN 2

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.0%
Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer.
Affected products
OpenVPN · Access ServerOpenVPN · OpenVPN 2 (Community)
Related CVEs — OpenVPN Access Server

In the same product, most dangerous first.

CVE-2023-46849HIGHCVE-2023-46849EPSS 1.1%CVE-2025-3110MEDIUMCVE-2025-3110EPSS 0.4%CVE-2025-50055MEDIUMCVE-2025-50055EPSS 0.2%