CVE-2026-78135

弱点类型

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass.

受影响产品

• strongswan strongswan

参考链接

• https://github.com/strongswan/strongswan/releases/tag/6.1.0
• https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78135).html