9 vulnerabilities found in VPN software, including 1 critical issue that could lead to remote code execution

Summary: Cisco Talos disclosed 17 vulnerabilities over two weeks, nine of them in the SoftEther VPN client, including TALOS-2023-1735 (CVE-2023-27395), a heap-based buffer overflow rated critical at 9.0 out of 10 that could allow arbitrary code execution. Two other SoftEther flaws, TALOS-2023-1755 (CVE-2023-32634) and TALOS-2023-1754 (CVE-2023-27516), could expose default RPC server credentials, enabling certificate installation and man-in-the-middle attacks.
Why it matters: A CVSS 9.0 buffer overflow in an open-source, cross-platform VPN client gives an attacker a path to run code on the endpoint, and the credential-exposure flaws let them sit in the middle of the tunnel to dump authentication settings and compromise whatever connects through it.

Read the original at Cisco Talos ↗

Topics: Endpoint & Network Security
Mentions: CVE-2023-27380 CVE-2023-27395 CVE-2023-27516 CVE-2023-28381 CVE-2023-31192 CVE-2023-32275 CVE-2023-32634 CVE-2023-34354 CVE-2023-34356 CVE-2023-35193 CVE-2023-35194
Related: Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026
Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026
Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026