The VPN That Signed You In as Root: IXON's Unauthenticated Config Endpoint and CVE-2026-75925
IXON's OT-focused VPN client writes config from a local endpoint that checks no credentials, then feeds it to a root subprocess with CRLF un-neutralized. CVSS 9.6 — and the injected config survives reboots while your VPN keeps working perfectly.
Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVSS 9.6CVE-2026-75925
vpnixoncve-2026-75925