OpenVPN 2.7.8 fixes two flaws: auth bypass and out-of-bounds read

OpenVPN 2.7.8 patches CVE-2026-88964, an integer underflow with out-of-bounds read (CVSS 7.1), and CVE-2026-84790, an identity bypass via an embedded NUL in a certificate subject (CVSS 7.6). Both require an authenticated position; the bypass affects 2.3.0–2.7.7, the read affects 2.7_alpha3–2.7.7 on Windows and Android.

• CVE-2026-84790: auth bypass via NUL in certificate subject, CVSS 7.6
• CVE-2026-88964: out-of-bounds read in PUSH_UPDATE, CVSS 7.1
• Affected versions 2.3.0–2.7.7; only 2.7.8 fixes both
• No documented workarounds and no confirmed exploitation