CyberSecBulletin

IXON vulnerabilities

We track 3 vulnerabilities in IXON products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 4, 2026.

3vulnerabilities
1critical
2high
0exploited
8.6average CVSS score

Latest IXON vulnerabilities

  • 9.6 Critical severity

    IXON VPN Client: Improper Neutralization of CRLF Sequences

    CVE-2026-75925IXON

    Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configuration values accepted by the local service are written to a file later consumed by a privileged subprocess, with

  • 8.1 High severity

    VPN Client: Incorrect Permission Assignment for Critical Resource

    CVE-2025-26169IXON

    IXON VPN Client before 1.4.4 on Windows allows Local Privilege Escalation to SYSTEM because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in

  • 8.1 High severity

    VPN Client: Incorrect Permission Assignment for Critical Resource

    CVE-2025-26168IXON

    IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration fi