Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
VeeVPN 1.6.1 contains an unquoted service path vulnerability in the VeePNService that allows remote attackers to execute code during startup or reboot with escalated privileges. Attackers can exploit this by providing a malicious service name, allowing them to inject commands and run as LocalSystem.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
🚨 HIGH SEVERITY: CVE-2025-66575 VeeVPN 1[.]6[.]1 unquoted service path flaw (CVSS 7.8) enables privilege escalation to LocalSystem. Attackers can execute malicious code during system startup/reboot. Update immediately. #CVE #Vulnerability #PatchNow https://t.co/aibaczBDIr
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | veepn | veepn | 1.6.1 | - | - |