Approved changes feed: RSS · Atom

cpe:2.3:a:protonvpn:protonvpn:1.5.1:*:*:*:*:*:*:*

part: a version: 1.5.1 update: *

VendorProtonvpn (1aae610e-c11b-56d3-8ffe-0fc9c9deda46)
ProductProtonvpn (37195cf6-3667-59c0-98e5-c028df5469cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/tprasadtp/protonvpn purl2cpe 2026-06-01 10:17:28.174685
pkg:github/protonvpn/android-app purl2cpe 2026-06-01 10:17:28.174688
pkg:github/protonvpn/ios-app purl2cpe 2026-06-01 10:17:28.174691
pkg:github/protonvpn/mac-app purl2cpe 2026-06-01 10:17:28.174694
pkg:github/tprasadtp/protonvpn-docker purl2cpe 2026-06-01 10:17:28.174696

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-4010 vulnerable 2026-06-08 05:11:41.576766 Details available
HIGH (8.8)
An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1. A specially crafted configuration file can cause a privilege escalation, resulting in the ability to execute arbitrary commands with the system's privileges.
Published: 2018-09-07T15:00:00.000Z
Updated: 2024-09-16T17:54:36.228Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.