CyberSecBulletin

VeePN vulnerabilities

We track 2 vulnerabilities in VeePN products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 4, 2025.

2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score

Latest VeePN vulnerabilities

  • 7.8 High severity

    VeeVPN: Unquoted Search Path or Element

    CVE-2025-66575VeePN

    VeeVPN 1.6.1 contains an unquoted service path vulnerability in the VeePNService that allows remote attackers to execute code during startup or reboot with escalated privileges. Attackers can exploit this by providing a malicious service name, allowing them to

  • 7.0 High severity

    VeePN: Untrusted Search Path

    CVE-2025-12286VeePN

    A weakness has been identified in VeePN up to 1.6.2. This affects an unknown function of the file C:\Program Files (x86)\VeePN\avservice\avservice.exe of the component AVService. This manipulation causes unquoted search path. The attack requires local access.