Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Pritunl records in CISA KEVNo Pritunl vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 47
A flaw was found in pritunl-client before version 1.0.1116.6.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02392 · Published 2020-07-21 · No fix listed CWE-22
Priority MEDIUM 40
Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth/session login attempts.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0747 · Published 2020-10-01 · No fix listed CWE-203
Priority LOW 37
In Pritunl Client before 1.3.4220.57, an administrator with access to /Applications can escalate privileges after uninstalling the product.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00164 · Published 2025-04-19 · Fixed in 1.3.4220.57 CWE-863
Priority LOW 35
Pritunl Client through 1.2.3019.52 on Windows allows local privilege escalation, related to an ACL entry for CREATOR OWNER in platform_windows.go.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00647 · Published 2022-02-20 · No fix listed CWE-269
Priority LOW 35
Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00772 · Published 2020-11-19 · No fix listed CWE-59
Priority LOW 34
Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the pritunl-service component.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00348 · Published 2021-04-30 · No fix listed CWE-269
Priority LOW 34
A flaw was found in pritunl-client before version 1.0.1116.6.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00698 · Published 2020-07-21 · No fix listed CWE-347
Open these records in search →