What is CVE-2026-78132?

CVE-2026-78132 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.

Which CVE IDs does CVE-2026-78132 cover?

CVE-2026-78132 covers the following CVE IDs: CVE-2026-78132. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2026-78132?

CVE-2026-78132 has a CVSS v3 base score of 7.5, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2026-78132?

CVE-2026-78132 affects 1 product, including: azl3 strongswan 5.9.14-10 on Azure Linux 3.0.

CVE-2026-78132HighCVSS 7.5

strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.

Vendor

Microsoft Security Response Center (MSRC)

Published

September 12, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-78132 →

🎯 Affected products1

azl3 strongswan 5.9.14-10 on Azure Linux 3.0

✅ Remediation

Security Update — fixed build 5.9.14-11

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78132
patchhttps://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade