CVE-2026-120279: A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown…

Aynı üründen diğer kayıtlar

• O

  Güvenlik açığıOrtaOpenVPN3 Kasım 2026

  CVE-2026-97350: Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of…

  Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations and proxy settings that allow non-privileged local users to influence operations performed with NT AUTHORITY\SYSTEM privileges. Two attack vectors have been identified: * Improper authorization of configuration checksum updates: The privileged service does not properly validate the authorization of connecting clients when updating the checksum of an OpenVPN configuration. This allows a non-privileged local user to modify an OpenVPN configuration and set a valid checksum without administrator privileges. The modified configuration is subsequently processed with NT AUTHORITY\SYSTEM privileges. * Argument injection via proxy settings: The client does not properly validate or sanitize proxy settings before passing them as arguments to OpenVPN. A non-privileged local user can inject additional arguments through the proxy settings, influencing the execution of OpenVPN with NT AUTHORITY\SYSTEM privileges. This attack vector does not require direct communication with the privileged service or modification of the protected OpenVPN configuration.

  6.9

  CVSS

• O

  Güvenlik açığıKritikOpenVPN2 Kasım 2026

  CVE-2026-120281: A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy…

  A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.

  9.3

  CVSS

• O

  Güvenlik açığıKritik Düzeltme: 2.5.10OpenVPN8 Temmuz 2024

  CVE-2024-27903: OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any…

  OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service.

  9.8

  CVSS

• O

  Güvenlik açığıYüksek Düzeltme: 2.5.10OpenVPN8 Temmuz 2024

  CVE-2024-24974: The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to…

  The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service.

  7.5

  CVSS