strongswan (SUSE:Linux Enterprise Server 16.0) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 16.0 package strongswan, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2025-62291 — CVSS 8.1 (high): In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6…
• CVE-2026-25075 — CVSS 7.5 (high): strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated…
• CVE-2025-9615 — CVSS 3.3 (low): A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows…