CVE-2026-97350

Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations and proxy settings that allow non-privileged local users to influence operations performed with NT AUTHORITY\SYSTEM privileges. Two attack vectors have been identified: Improper authorizati...

CVE-2026-97350 Local Privilege Escalation via OpenVPN Configuration and Proxy Settings in Securepoint SSL VPN Client v2 for Windows

Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations and proxy settings that allow non-privileged local users to influence operations performed with NT AUTHORITY\SYSTEM privileges. Two attack vectors have been identified: Improper authorizati...

CVE-2026-97350

The Securepoint SSL VPN Client v2 for Windows is vulnerable to Local Privilege Escalation due to flaws in handling OpenVPN configurations and proxy settings. A non-privileged local user can exploit two vectors to influence operations performed with NT AUTHORITYSYSTEM privileges. First, a lack of...

EUVD-2026-115911

Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations and proxy settings that allow non-privileged local users to influence operations performed with NT AUTHORITY\SYSTEM privileges. Two attack vectors have been identified: Improper authorizati...

CVE-2026-97350 Local Privilege Escalation via OpenVPN Configuration and Proxy Settings in Securepoint SSL VPN Client v2 for Windows

Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations and proxy settings that allow non-privileged local users to influence operations performed with NT AUTHORITY\SYSTEM privileges. Two attack vectors have been identified: Improper authorizati...

CVE-2026-97350: Securepoint Securepoint SSL VPN Client v2: Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations and proxy…

Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations and proxy settings that allow non-privileged local users to influence operations performed with NT AUTHORITY\SYSTEM privileges. Two attack vectors have been identified: Improper authorizati...

EUVD-2026-114908

A vulnerability was detected in WAVLINK WN536AX6-A V2605072.0.0. Impacted is the function sub416d48/sub41a7c0 of the file /bin/ioos of the component VPN Client List Handler. Performing a manipulation of the argument opt results in missing authentication. The attack can be initiated remotely. The...

CVE-2026-120278

A vulnerability was detected in WAVLINK WN536AX6-A V2605072.0.0. Impacted is the function sub416d48/sub41a7c0 of the file /bin/ioos of the component VPN Client List Handler. Performing a manipulation of the argument opt results in missing authentication. The attack can be initiated remotely. The...

CVE-2026-120278: WAVLINK WN536AX6-A: A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0

A vulnerability was detected in WAVLINK WN536AX6-A V2605072.0.0. Impacted is the function sub416d48/sub41a7c0 of the file /bin/ioos of the component VPN Client List Handler. Performing a manipulation of the argument opt results in missing authentication. The attack can be initiated remotely. The...

TP-Link Archer AX17 v1 VPN Client Import Command Injection

TP-Link Archer AX17 v1 versions before 1.5.0 Build 20260605 contain an authenticated OS command injection in VPN client import functionality. An administrative LAN session can import a crafted OpenVPN profile to execute commands as root. https://packetstorm.news/download/238911...

CVE-2026-120278

A vulnerability exists in the VPN Client List Handler component of the WAVLINK WN536AX6-A V260507_2.0.0 firmware. Specifically, the functions sub_416d48/sub_41a7c0 within the /bin/ioos file are affected. By manipulating the opt argument, an attacker can bypass authentication. This attack can be i...

CVE-2026-120278 WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication

A vulnerability was detected in WAVLINK WN536AX6-A V2605072.0.0. Impacted is the function sub416d48/sub41a7c0 of the file /bin/ioos of the component VPN Client List Handler. Performing a manipulation of the argument opt results in missing authentication. The attack can be initiated remotely. The...

CVE-2026-120278 WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication

A vulnerability was detected in WAVLINK WN536AX6-A V2605072.0.0. Impacted is the function sub416d48/sub41a7c0 of the file /bin/ioos of the component VPN Client List Handler. Performing a manipulation of the argument opt results in missing authentication. The attack can be initiated remotely. The...

Exploit for CVE-2026-9151

CVE-2026-9151 Authenticated OS command injection in the Arche...

PT-2026-135060

A vulnerability was detected in WAVLINK WN536AX6-A V260507 2.0.0. Impacted is the function sub 416d48/sub 41a7c0 of the file /bin/ioos of the component VPN Client List Handler. Performing a manipulation of the argument opt results in missing authentication. The attack can be initiated remotely. T...

CVE-2026-22226

CVE-2026-22226 Proof of Concept for CVE-2026-22226 Authenticated LAN-side OS Command Injection in the VPN Client of TP-Link Archer Wi-Fi routers Vulnerability brief The VPN Client controller stores the user-controlled entry description des in the UCI configuration with a weak validation regex. Wh...

CVE-2009-4118

CVE-2009-4118 Cisco VPN Client - Integer Overflow Denial of Service Exploit-DB publication at https://www.exploit-db.com/exploits/10190/ Cisco official Intelligence AlertID 19445 and Credits http://tools.cisco.com/security/center/viewAlert.x?alertId=19445 Author Alex Hernandez aka @alt3kx...

[SECURITY] Fedora 45 Update: openconnect-9.21-3.fc45

This package provides a multi-protocol VPN client for Cisco AnyConnect, Junip er SSL VPN, Pulse/Ivanti Pulse Connect Secure, F5 BIG-IP, Fortinet Palo Alto Networks GlobalProtect SSL VPN, Array Networks SSL VPN...

EUVD-2026-71776

Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configuration values accepted by the local service are written to a file later consumed by a privileged subprocess, without line-ending sequences being...

CVE-2026-75925

Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configuration values accepted by the local service are written to a file later consumed by a privileged subprocess, without line-ending sequences being...