Illumio vulnerabilities
We track 3 vulnerabilities in Illumio products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
Latest Illumio vulnerabilities
- 7.8 High severity
Core Ven: Uncontrolled Search Path Element
The OpenSSL library bundled with the Illumio VEN is affected by an uncontrolled search path vulnerability. A low-privileged, authenticated local attacker could potentially leverage this vulnerability to execute arbitrary code with elevated privileges.
- 7.8 High severity
Core Ven: Incorrect Permission Assignment for Critical Resource
Incorrect permission assignment allows local privilege escalation to SYSTEM on affected releases of the Illumio VEN for Windows. Code execution as NT AUTHORITY\LOCAL SERVICE on the Windows host is required to exploit this vulnerability. The flaw exists within
- 8.8 High severity
Core PCE: Deserialization of Untrusted Data
Unsafe deserialization of untrusted JSON allows execution of arbitrary code on affected releases of the Illumio PCE. Authentication to the API is required to exploit this vulnerability. The flaw exists within the network_traffic API endpoint. An attacker can l