Vulnerabilities

TI-2022-26370 CVE-2022-50917 · GHSA-4wxf-j589-93pj

ProtonVPN 1.26.0 - Unquoted Service Path

HIGH 72

ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows local attackers to potentially execute arbitrary code.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00229 Published 2026-01-13 No fix listed CWE-428

TI-2024-24896 CVE-2024-37391 · GHSA-xp27-8r9x-g424

ProtonVPN before 3.2.10 on Windows mishandles the drive installer path, which should use…

LOW 34

ProtonVPN before 3.2.10 on Windows mishandles the drive installer path, which should use this: '"' + ExpandConstant('{autopf}\Proton\Drive') + '"' in Setup/setup.iss.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00313 Published 2024-07-22 No fix listed CWE-78

TI-2006-03192 CVE-2006-3293 · GHSA-58j8-7hc9-7x59

parse_notice (TiCPU) in EnergyMech (emech) before 3.0.2 allows remote attackers to cause…

LOW 26

parse_notice (TiCPU) in EnergyMech (emech) before 3.0.2 allows remote attackers to cause a denial of service (crash) via empty IRC CTCP NOTICE messages.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01814 Published 2006-06-29 No fix listed

Vulnerabilities

Filters

ProtonVPN 1.26.0 - Unquoted Service Path

ProtonVPN before 3.2.10 on Windows mishandles the drive installer path, which should use…

parse_notice (TiCPU) in EnergyMech (emech) before 3.0.2 allows remote attackers to cause…