CVE-2020-37101 — VPN unlimited 6.1 - Unquoted Service Path
VPN Unlimited 6.1 contains an unquoted service path vulnerability that allows local attackers to inject malicious executables into the service binary path. Attackers can exploit…
Published: 2026-02-03 · CVSS: 8.5 · CVSS 4.0
VPN Unlimited 6.1 contains an unquoted service path vulnerability that allows local attackers to inject malicious executables into the service binary path. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\VPN Unlimited\' to replace the service executable and gain elevated system privileges.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7