<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: openvpn-client</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-47101: The installer (aka openvpn-client-installer) in Securepoint SSL VPN Client before 2.0.40 allows local privileg</title><link>https://patchthecve.com/cve/CVE-2023-47101.html</link><guid>https://patchthecve.com/cve/CVE-2023-47101.html</guid><pubDate>Wed, 17 Jun 2026 06:32:08 +0000</pubDate><description>HIGH 7.8: The installer (aka openvpn-client-installer) in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installation or repair.</description></item><item><title>CVE-2021-27406: An attacker can take leverage on PerFact OpenVPN-Client versions 1.4.1.0 and prior to send the config command </title><link>https://patchthecve.com/cve/CVE-2021-27406.html</link><guid>https://patchthecve.com/cve/CVE-2021-27406.html</guid><pubDate>Wed, 17 Jun 2026 03:44:48 +0000</pubDate><description>HIGH 8.8: An attacker can take leverage on PerFact OpenVPN-Client versions 1.4.1.0 and prior to send the config command from any application running on the local host machine to force the back-end server into initializing a new open-VPN instance with arbitrary open-VPN configuration. This could result in the </description></item><item><title>CVE-2021-35523: Securepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local pr</title><link>https://patchthecve.com/cve/CVE-2021-35523.html</link><guid>https://patchthecve.com/cve/CVE-2021-35523.html</guid><pubDate>Wed, 17 Jun 2026 03:57:38 +0000</pubDate><description>HIGH 7.8: Securepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under &quot;%APPDATA%\Securepoint SSL VPN&quot; and add a external script file that i</description></item></channel></rss>