CVE-2026-75925

IXON VPN Client versions prior to 1.4.7 contain a CRLF injection vulnerability (CWE-93, with contributing CWE-306) that enables remote code execution with root or SYSTEM privileges . The local configuration service accepts changes without authenticating the requester and writes values to a file l...