PT-2026-30923 · Unknown · Softether Vpn

Stanleytobias · Published 2026-04-07 · Updated 2026-04-07 · CVE-2026-39312

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SoftEtherVPN versions 5.2.5188 and earlier

Description SoftEtherVPN is a cross-platform multi-protocol VPN Program. A pre-authentication denial-of-service condition exists. An unauthenticated remote attacker can terminate active VPN sessions by sending a malformed EAP-TLS packet over raw L2TP (UDP/1701), causing the vpnserver process to crash.

Recommendations Update to a version later than 5.2.5188.

Exploit

Fix

DoS

Weakness Enumeration

CWE-789

Related Identifiers

CVE-2026-39312

Affected Products

Softether Vpn

References · 3

• 🔥 https://github.com/SoftEtherVPN/SoftEtherVPN/security/advisories/GHSA-q5g3-qhc6-pr3h · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-39312 · Security Note
• https://twitter.com/CVEnew/status/2041569968064696337 · Twitter Post