VulnSocial

CVE-2026-2542Disclosure

LOWCVSS 7.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in Total VPN 0.5.29.0 on Windows. Affected by this vulnerability is an unknown functionality of the file C:\Program Files\Total VPN\win-service.exe. Executing a manipulation can lead to unquoted search path. It is possible to launch the attack on the local host. This attack is characterized by high complexity. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-426CWE-428

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-02-16); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-02-16: 3Mentions · 2026-02-20: 1Patch / Workaround · 2026-02-16: 1Technical Details · 2026-02-16: 2Technical Details · 2026-02-20: 102-1602-20
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-02-163
Disclosure2General1
2026-02-201
Disclosure1
Full discourse4 posts
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2026-2542 (CVSS:7.3, HIGH) is Awaiting Analysis. A weakness has been identified in Total VPN 0.5.29.0 on Windows. Affected by this vulnerability is an unknown functional..https://nvd.nist.gov/vuln/detail/CVE-2026-2542 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The entry announces a new high‑severity vulnerability (CVE‑2026‑2542) affecting Total VPN 0.5.29.0 on Windows, with CVSS 7.3, but no PoC, exploit, or patch information is provided at this time.

    0000031
    171 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-2542 Local Privilege Escalation in Total VPN 0.5.29.0 via Unquoted Search Path https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2542

    Post summary

    The post reports a local privilege escalation issue in Total VPN 0.5.29.0 caused by an unquoted search path. No PoC, exploit code, or remediation details are included.

    0000059
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-2542 A weakness has been identified in Total VPN 0.5.29.0 on Windows. Affected by this vulnerability is an unknown functionality of the file C:\Program Files\Total VPN\win-s… https://www.cve.org/CVERecord?id=CVE-2026-2542

    Post summary

    A weakness in Total VPN 0.5.29.0 on Windows (CVE-2026-2542) has been reported, but no technical details, exploit, or mitigation information are provided.

    00000366
    56.4K followersView on X
  • OffSeq | Adversary Tactics for Cyber Resilience@offseq
    Disclosure

    🚨 HIGH-severity alert: CVE-2026-2542 impacts Total VPN 0.5.29.0 on Windows. Unquoted search path flaw risks privilege escalation if exploited locally. No patch yet — review directory permissions & monitor closely. https://radar.offseq.com/threat/cve-2026-2542-unquoted-search-p... https://t.co/NLgqYWuxWs

    Post summary

    The tweet announces a high‑severity unquoted search path vulnerability (CVE‑2026‑2542) in Total VPN, highlights the privilege escalation risk, and recommends reviewing directory permissions as a mitigation, with no patch yet available.

    0000048
    265 followersView on X

Explore more

Back to dashboard