CVE-2026-114032: Local privilege escalation via untrusted OpenSSL configuration

Published Nov 9, 2026

Updated

The OpenSSL library bundled with the Illumio VEN for Windows is affected by an uncontrolled search path vulnerability. A low-privileged, authenticated local attacker could potentially leverage this vulnerability to execute arbitrary code with SYSTEM privileges.

Affected Software

1 affected component

Illumio VEN for Windows

Event History

Nov 9, 2026

CVE Published

via MITRE·09:31 PM

Data Sourced

via MITRE·09:31 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

Exploitation requires a low-privileged, authenticated attacker with local access to a Windows system running the affected Illumio VEN. It is not described as remotely exploitable.

What level of access could an attacker obtain?

A successful exploit could allow arbitrary code execution with SYSTEM privileges, resulting in full compromise of the affected Windows host.

CVE-2026-114032: Local privilege escalation via untrusted OpenSSL configuration

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What level of access could an attacker obtain?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What level of access could an attacker obtain?