{"vulnerability": "CVE-2026-75925", "sightings": [{"uuid": "ec0cd7b9-4503-4326-acc8-4d4330ffa09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mupzboykz22j", "content": "CVE-2026-75925 - ixon vpn client\nThe IXON VPN client (versions before 1.4.7) can be tricked into adding extra commands to its own configuration file. Because the client does not check who is making changes, an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ixon #CVE #infosec", "creation_timestamp": "2026-09-04T22:30:04.809228Z"}, {"uuid": "820cadde-fa5d-43d8-afa1-95fde2baadd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2bsq4p4l67sch", "content": "CVE-2026-75925 - IXON VPN Client CRLF Injection\nCVE ID : CVE-2026-75925\n \n Published : Sept. 4, 2026, 10:17 p.m. | 20\u00a0minutes ago\n \n Description : Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root o...", "creation_timestamp": "2026-09-04T22:58:56.506449Z"}, {"uuid": "6f9ea744-691e-4e93-91b4-85d470710348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muq336j23o2s", "content": "\ud83d\udd34 CVE-2026-75925 - Critical (9.6)\n\nImproper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attac...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75925/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T23:02:14.743104Z"}, {"uuid": "ea64060f-8cca-46df-8fd2-3e94cee1ac4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muq6poakgw2t", "content": "\ud83d\udea8 CVE-2026-75925 \u2014 CVSS 9.4 CRITICAL\n\nImproper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to exe...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75925\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T00:07:22.980345Z"}, {"uuid": "584cdaf5-ed78-4585-b71f-3115847f46f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117232828506352595", "content": "CVE-2026-75925: CRLF injection in IXON VPN Client (<1.4.7) lets unauthenticated attackers execute commands as root/SYSTEM via crafted config values. CVSS 9.6. Unpatched\u2014assume risk now. Update immediately if using this client. Details: https://www.valtersit.com/cve/CVE-2026-75925", "creation_timestamp": "2026-09-08T01:30:02.949688Z"}, {"uuid": "56d2dc72-0564-4878-9722-7333e3937912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muxuqa775u27", "content": "CVE-2026-75925: CRLF injection in IXON VPN Client (<1.4.7) lets unauthenticated attackers execute commands as root/SYSTEM via crafted config values. CVSS 9.6. Unpatched\u2014assume risk now. Update immediately if using this client. Details: https://www.valtersit.com/cve/CVE-2026-75925", "creation_timestamp": "2026-09-08T01:30:02.000486Z"}, {"uuid": "9253cd03-05df-4a59-bd67-5e726a691cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117309439231849832", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-089Lenze: VPN Client Remote Code Execution in combination with Lenze x500 IoT GatewayCVE-2026-75925\nThe Lenze VPN client is vulnerable to a Remote Code Execution. The vulnerability would allow an attacker to perform a remote code execution on the computer running the client with elevated privile\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-089CSAF JSON: https://lenze.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-089.json\n#OT #Advisory", "creation_timestamp": "2026-09-21T14:13:08.665090Z"}, {"uuid": "14bfd34d-b987-444d-83d8-0bb4e0227e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvzvgskwqkh2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-089\nLenze: VPN Client Remote Code Execution in combination with Lenze x500 IoT Gateway\nCVE-2026-75925\n\nThe Lenze VPN client is vulnerable to a Remote Code Execution. The vulnerability would allow an attacker to perform a remote code execution on the [\u2026]", "creation_timestamp": "2026-09-21T14:13:16.201468Z"}]}