https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:01:00.617108+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-183551 EUVD-2026-183551 2026-10-04T04:01:00.619806+00:00 EUVD-2026-183551 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10204 fkie_cve-2018-10204 2026-10-04T04:01:00.619837+00:00

PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service. When configured to use the OpenVPN protocol, the "sevpnclient" service executes "openvpn.exe" using the OpenVPN config file located at %PROGRAMDATA%\purevpn\config\config.ovpn. This file allows "Write" permissions to users in the "Everyone" group. An authenticated attacker may modify this file to specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM account.

 https://cve.radiocsirt.org/vuln/ghsa-7925-2p2w-mgxj GHSA-7925-2p2w-mgxj 2026-10-04T04:01:00.619870+00:00

PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service. When configured to use the OpenVPN protocol, the "sevpnclient" service executes "openvpn.exe" using the OpenVPN config file located at %PROGRAMDATA%\purevpn\config\config.ovpn. This file allows "Write" permissions to users in the "Everyone" group. An authenticated attacker may modify this file to specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM account.

 https://cve.radiocsirt.org/vuln/gsd-2018-10204 gsd-2018-10204 2026-10-04T04:01:00.619890+00:00 gsd-2018-10204