VPN unlimited 6.1 - Unquoted Service Path

Published 9 mo ago 2026-02-03 · modified 4 mo ago 2026-06-17 · JSON

CVSS

7.8

v3.1 · CNA

CISA KEV

not known exploited

EPSS

0.1%

percentile 3%

Public exploits

none known

VPN Unlimited 6.1 contains an unquoted service path vulnerability that allows local attackers to inject malicious executables into the service binary path. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\VPN Unlimited\' to replace the service executable and gain elevated system privileges.

CISA SSVC assessment

Exploitation: Proof of concept public
Automatable: no
Technical impact: total
Assessed: 9 mo ago 2026-02-03

Exploit prediction (EPSS)

0.13% probability of exploitation in the next 30 days, higher than 3% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	4.0	8.5	`CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`
CNA	3.1	7.8	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CNA	4.0	8.5	`CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`
CNA	3.1	7.8	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Affected products

Vpnunlimitedapp VPN unlimited

Classification

Weakness

CWE-428 Unquoted Search Path or Element

References

exploit-db.com /exploits/47916 · exploit
vpnunlimitedapp.com · product
vulncheck.com /advisories/vpn-unlimited-unquoted-service-path · third-party-advisory

Sources

CVE List: CVE-2020-37101
NVD: CVE-2020-37101

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.

Summary