Read the docs

Nordvpn

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Nordvpn records in CISA KEV

No Nordvpn vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nordvpn 4 records MEDIUM

Records

6 records

TI-2018-15593 CVE-2018-25368 · GHSA-x9hx-hwff-3m7w

Nord VPN 6.14.31 Denial of Service via Password Field

Priority HIGH 77

Nord VPN 6.14.31 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting an excessively long string in the password field.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00386 Published 2026-05-25 No fix listed CWE-789
TI-2020-19127 CVE-2020-36992 · GHSA-xrrp-v29c-5f2g

Nord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service Path

Priority HIGH 72

Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with elevated privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00174 Published 2026-01-28 No fix listed CWE-428
TI-2019-15625 CVE-2019-25572 · GHSA-cqg2-35mm-6458

NordVPN 6.19.6 Denial of Service via Email Field Buffer Overflow

Priority MEDIUM 64

NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00163 Published 2026-03-21 No fix listed CWE-1260
TI-2018-02920 CVE-2018-3952 · GHSA-5f3h-x9wv-4c7q

OS command injection in Talos NordVPN

Priority MEDIUM 40

An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0086 Published 2018-09-07 No fix listed CWE-78
Open these records in search →