PT-2026-5118 · Node Security · Nordvpn

Chipo · Publicado 2026-01-28 · Atualizado 2026-01-28 · CVE-2020-36992

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nord VPN version 6.31.13.0

Description Nord VPN version 6.31.13.0 has an unquoted service path vulnerability in its nordvpn-service. This allows local attackers to execute code with elevated privileges. The vulnerability stems from an unquoted binary path, which attackers can exploit during system startup or reboot to potentially run malicious code with LocalSystem permissions.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider modifying the service path to include quotes to prevent execution of unauthorized code.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2020-36992

Produtos afetados

Nordvpn

Referências · 5

• 🔥 https://exploit-db.com/exploits/48790 · Exploit
• https://vulncheck.com/advisories/nord-vpn-nordvpn-service-unquoted-service-path · Nota
• https://nordvpn.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-36992 · Nota de Segurança
• https://t.me/CVEtracker/43149 · Publicação no Telegram