Leadsec SSL VPN vulnerabilities

1 known vulnerability in Leadsec SSL VPN from Beijing NetGuard Nebula Information Technology. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  A path traversal vulnerability exists in the Leadsec SSL VPN (formerly Lenovo NetGuard)…

  CVE-2025-34047Jun 26, 2025Beijing NetGuard Nebula Information Technology

  A path traversal vulnerability exists in the Leadsec SSL VPN (formerly Lenovo NetGuard), allowing unauthenticated attackers to read arbitrary files on the underlying system via the ostype parameter in the /vpn/user/download/client endpoint. This flaw arises fr