Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: IXON Clear all filters
TI-2026-53152 CVE-2026-75925 · GHSA-6x6j-jwcm-r3mg

IXON VPN Client CRLF Injection

Priority MEDIUM 44

Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM.

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.00671 Published 2026-09-04 Fixed in 1.4.7 CWE-93
TI-2025-19258 CVE-2025-26169 · GHSA-3h4v-p542-7xmc

Incorrect permission assignment in IXON VPN Client

Priority LOW 37

IXON VPN Client before 1.4.4 on Windows allows Local Privilege Escalation to SYSTEM because there is code execution from a configuration file that can be controlled by a low-privileged user.

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.00227 Published 2025-05-07 Fixed in 1.4.4 CWE-732
TI-2025-19257 CVE-2025-26168 · GHSA-f4mm-pxc8-94h7

Incorrect permission assignment in IXON VPN Client

Priority LOW 36

IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code execution from a configuration file that can be controlled by a low-privileged user.

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.00183 Published 2025-05-07 Fixed in 1.4.4 CWE-732