OOpenVPN Inc

Products

Exploited and recent CVEs

• CVE-2026-9560 Critical 9.4 Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel 0.6%
• CVE-2022-3761 Unrated OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to intercept configuration profile download requests which contain 0.8%