https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2002-1747.htmlhttps://patchthecve.com/cve/CVE-2002-1747.htmlTue, 16 Jun 2026 21:59:54 +0000MEDIUM 5.0: Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB.https://patchthecve.com/cve/CVE-2002-1746.htmlhttps://patchthecve.com/cve/CVE-2002-1746.htmlTue, 16 Jun 2026 21:59:54 +0000MEDIUM 5.0: Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets.https://patchthecve.com/cve/CVE-2002-1697.htmlhttps://patchthecve.com/cve/CVE-2002-1697.htmlTue, 16 Jun 2026 21:59:48 +0000HIGH 7.5: Electronic Code Book (ECB) mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks, which could allow remote attackers to gain sensitive information.