Skip to content
OpenAdvisories
High · 7.8 CVE-2026-114032 EUVD-2026-120463GHSA-hfch-75cm-rh8m

Local privilege escalation via untrusted OpenSSL configuration

Published Nov 9, 2026 · Updated Nov 13, 2026 · Assigned by Illumio

Description

The OpenSSL library bundled with the Illumio VEN is affected by an uncontrolled search path vulnerability. A low-privileged, authenticated local attacker could potentially leverage this vulnerability to execute arbitrary code with elevated privileges.

Affected products

VendorProductAffectedFixed
Illumio Core Ven 24.2.20 – < 26.2.20 26.2.20

References