NULL Pointer Dereference in strongSwan EAP-AKA Plugin

CVE-2026-78126

What is CVE-2026-78126?

The strongSwan software, specifically versions ranging from 4.1.10 to 6.0.7, contains a vulnerability in the eap-aka plugin that allows a NULL pointer dereference, potentially leading to application crashes or instability. This flaw can be exploited in certain situations, posing risks to secure communication protocols. It is important for users to update to the latest version of strongSwan to mitigate this issue and ensure the integrity and security of their network communications.

References