EIP-2026-101317

The vulnerability involves the transmission of a hash of a pre-shared master secret in clear-text during aggressive mode key negotiation in VPN configurations. This allows eavesdroppers or malicious clients to perform offline brute-force attacks to obtain the clear-text secret.