Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Private Internet Access Clear all filters
TI-2026-83921 CVE-2026-120627 · GHSA-x5vg-vpvp-9jx9

Credential leak in Private Internet Access Firefox extension

Priority LOW 39

The Private Internet Access Extension for Firefox contains an unguarded onAuthRequired authentication handler, leading to leakage of PIA proxy credentials when a user visits any malicious website that issues a Basic auth…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00295 Published 2026-11-02 No fix listed CWE-287
TI-2022-26377 CVE-2022-50924 · GHSA-qcrp-x5xv-4mr4

Private Internet Access 3.3 - 'pia-service' Unquoted Service Path

Priority LOW 38

Private Internet Access 3.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00216 Published 2026-01-13 No fix listed CWE-428