PT-2026-8316 · Total Vpn+1 · Total Vpn+1

Cyber-Wo0Dy · Publicado 2026-02-16 · Atualizado 2026-02-21 · CVE-2026-2542

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Total VPN version 0.5.29.0

Description A security issue exists in Total VPN 0.5.29.0 on Windows related to an unquoted search path within the file C:Program FilesTotal VPNwin-service.exe. This can lead to potential local privilege escalation. The exploitation of this issue is considered difficult and requires high complexity. The vendor was contacted regarding this issue but did not provide a response.

Recommendations Review directory permissions for the affected file. Monitor the system closely for any suspicious activity.

Correção

LPE

Untrusted Search Path

Enumeração de Fraquezas

CWE-428

CWE-426

Identificadores relacionados

CVE-2026-2542

Produtos afetados

Total Vpn

Windows

Referências · 12

• https://vuldb.com/?submit.749365 · Nota
• https://t.me/CVEtracker/44795 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2023303633467514884 · Publicação no Twitter
• https://twitter.com/offseq/status/2023298844633547055 · Publicação no Twitter
• https://twitter.com/cracbot/status/2024801267462410705 · Publicação no Twitter
• https://vuldb.com/?ctiid.346127 · Nota
• https://github.com/Cyber-Wo0dy/report/blob/main/totalvpn/0.5.29.0/totalvpn_unquoted_service_path.md · Nota
• https://vuldb.com/?id.346127 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2542 · Nota de Segurança
• https://twitter.com/CVEnew/status/2023302240518193231 · Publicação no Twitter
• https://t.me/cveNotify/152090 · Publicação no Telegram
• https://twitter.com/cracbot/status/2025163635400814917 · Publicação no Twitter