CVE-2026-107060

A flaw was found in Tailscale. Insecure permissions allow an unauthorized attacker to make arbitrary modifications to another user's Virtual Private Network VPN configurations and preferences. An attacker could exploit this issue to alter network routing and connection settings without proper...

CVE-2026-107060

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences...

PT-2026-132391

Name of the Vulnerable Software and Affected Versions Tailscale version 297862600 Description Insecure permissions in the Android application allow an unauthorized attacker to make arbitrary changes to another user's VPN configurations and preferences. Recommendations At the moment, there is no...

CVE-2026-107060

Tailscale version 297862600 is affected by a vulnerability involving insecure permissions (CWE-732). This flaw allows unauthorized attackers to perform arbitrary changes to another user's VPN configurations and preferences. While the vulnerability has been observed in the wild, no specific exploi...

CVE-2026-107060: n/a: Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to…

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences...

CVE-2026-107060

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences...

CVE-2026-107060

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences...

EUVD-2026-113254

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences...

CVE-2026-107060

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences...

Vulnerability fixed in WatchGuard Fireware OS

WatchGuard has fixed a vulnerability in Fireware OS Specific to certain VPN configurations. The vulnerability is in the way Fireware OS handles Out-of-bounds Write. This allows a malicious, unauthenticated attacker to execute arbitrary code. This could lead to serious consequences for affected...

EUVD-2024-38093

Malicious code in bioql PyPI...

NetworkManager security vulnerability

NetworkManager is a network management daemon. A security vulnerability exists in NetworkManager that stems from a flaw found in NetworkManager's libreswan client plug-in that prevents it from properly cleaning up VPN configurations for local, unprivileged users...

CVE-2024-39567

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.2 HF1. The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an authenticated local attacker t...

CVE-2024-39569

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.2 HF1. The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an administrative remote attacker...

CVE-2024-39567

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.2 HF1. The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an authenticated local attacker t...

CVE-2024-39569

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.2 HF1. The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an administrative remote attacker...

CVE-2024-39567

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.2 HF1. The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an authenticated local attacker t...

CVE-2024-39567

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.2 HF1. The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an authenticated local attacker t...

CVE-2024-39567

The CVE-2024-39567 issue affects SINEMA Remote Connect Client (versions prior to V3.2 HF1). The vulnerability is a command-injection flaw in the system service caused by missing server-side input sanitation when loading VPN configurations, allowing an authenticated local attacker to execute arbit...

PT-2024-5082 · Siemens · Sinema Remote Connect Client

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Client versions prior to V3.2 HF1 Description: A vulnerability has been identified in the system service of affected applications, which is vulnerable to command injection due to missing server-side input sanitation when...