WhatBrokeToday
FAQ
Today's Trends
highInvestigatingOpenSSH

OpenSSL Library Bundled with Illumio VEN for Windows Arbitrary Code Execution

  1. Investigating(current)
  2. Trending(upcoming)
  3. Workaround available(upcoming)
  4. Resolved(upcoming)

Executive summary

The OpenSSL library bundled with the Illumio VEN for Windows contains an uncontrolled search path vulnerability (CVE-2026-114032). A low-privileged, authenticated local attacker can leverage this vulnerability to execute arbitrary code with SYSTEM privileges.

No verified workaround yet

None of the linked reports describe a mitigation. Follow this incident to hear when one appears.

Official fix
Technical root cause

Uncontrolled search path vulnerability in the OpenSSL library bundled with the Illumio VEN for Windows.

Evidence

1 report · 1 CVEShow
  1. [1]
    CVE First report
    OpenSSL library bundled with the Illumio VEN: CVE-2026-114032 (High)(opens security advisory in a new tab)

    High severity. The OpenSSL library bundled with the Illumio VEN for Windows is affected by an uncontrolled search path vulnerability. A low-privileged, authenticated local attacker could potentially leverage this vulnerability to execute arbitrary code with SYSTEM privileges.

    by Tenable 0upvotes 0comments

Timeline

  1. First report on security advisory

    OpenSSL library bundled with the Illumio VEN: CVE-2026-114032 (High)

    Source