Core Ven vulnerabilities

2 known vulnerabilities in Core Ven from Illumio. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Core Ven: Uncontrolled Search Path Element

  CVE-2026-114032Nov 9, 2026Illumio

  The OpenSSL library bundled with the Illumio VEN is affected by an uncontrolled search path vulnerability. A low-privileged, authenticated local attacker could potentially leverage this vulnerability to execute arbitrary code with elevated privileges.

• 7.8 High severity

  Core Ven: Incorrect Permission Assignment for Critical Resource

  CVE-2026-114031Nov 9, 2026Illumio

  Incorrect permission assignment allows local privilege escalation to SYSTEM on affected releases of the Illumio VEN for Windows. Code execution as NT AUTHORITY\LOCAL SERVICE on the Windows host is required to exploit this vulnerability. The flaw exists within