Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-114031

Local privilege escalation via insecure folder permissions

Incorrect permission assignment allows local privilege escalation to SYSTEM on affected releases of the Illumio VEN for Windows. Code execution as NT AUTHORITY\LOCAL SERVICE on the Windows host is required to exploit this vulnerability. The flaw exists within the VEN installer, which grants LOCAL SERVICE full access to the VEN data and installation folders, whose configuration and state files are read and trusted by the SYSTEM-privileged illumio-ven-ctl component. An attacker can leverage this vulnerability to modify the VEN configuration so that illumio-ven-ctl executes an injected command in the context of the SYSTEM account.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Illumio
Products
Core Ven
CVE-2026-114032

Local privilege escalation via untrusted OpenSSL configuration

The OpenSSL library bundled with the Illumio VEN for Windows is affected by an uncontrolled search path vulnerability. A low-privileged, authenticated local attacker could potentially leverage this vulnerability to execute arbitrary code with SYSTEM privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Illumio
Products
Core Ven
CVE-2023-5183

Authenticated RCE due to unsafe JSON deserialization

Unsafe deserialization of untrusted JSON allows execution of arbitrary code on affected releases of the Illumio PCE. Authentication to the API is required to exploit this vulnerability. The flaw exists within the network_traffic API endpoint. An attacker can leverage this vulnerability to execute code in the context of the PCE’s operating system user.  

CVSS 3.1 · 9.9 Critical EPSS 1.8% KEV · Not listed
Vendors
Illumio
Products
Core Policy Compute Engine