TheGreenBow vulnerabilities
We track 3 vulnerabilities in TheGreenBow products across 7 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2025.
Latest TheGreenBow vulnerabilities
- 8.2 High severity
TheGreenBow VPN Client Windows Enterprise: Improper Check for Certificate Revocation
Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5 and 7.6. During the IKEv2 authentication step, the OCSP-enabled VPN client establishes the tunnel even if it does not receive an OCSP response or if the OCSP response sign
- 7.3 High severity
android_vpn: Improper Authentication
An issue in TheGreenBow Windows Standard VPN Client 6.87.108 (and older), Windows Enterprise VPN Client 6.87.109 (and older), Windows Enterprise VPN Client 7.5.007 (and older), Android VPN Client 6.4.5 (and older) VPN Client Linux 3.4 (and older), VPN Client M
- 9.8 Critical severity
Thegreenbow VPN Client: Improper Privilege Management
An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VPN Client 6.87 allows attackers to gain escalated privileges via crafted changes to memory mapped file.