{"affected":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Core Ven","source":"CNA: Illumio","vendor":"Illumio","versions":[{"lessThan":"26.2.20","status":"affected","version":"24.2.20","versionType":"semver"}]}],"cveId":"CVE-2026-114032","cwes":["CWE-427"],"description":"The OpenSSL library bundled with the Illumio VEN for Windows is affected by an uncontrolled search path vulnerability. A low-privileged, authenticated local attacker could potentially leverage this vulnerability to execute arbitrary code with SYSTEM privileges.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.8,"severity":"high","source":"CNA: Illumio","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794260132985,"publishedAt":1794259912776,"references":[{"source":"CNA: Illumio","tags":["vendor-advisory"],"url":"https://product-docs-repo.illumio.com/Tech-Docs/Security+Advisories/out/en/security-advisories/untrusted-openssl-configuration-load-in-the-windows-ven.html"}],"remediation":[],"revision":"f3f7d868dc1eea46caa84fffe1fa1c42071854eef02dbbeccf8487c1d575dd70","sources":[{"modifiedAt":1794260132985,"name":"CNA: Illumio","retrievedAt":1794262131364,"url":"https://www.cve.org/CVERecord?id=CVE-2026-114032"}],"ssvc":null,"status":"published","title":"Local privilege escalation via untrusted OpenSSL configuration","updatedAt":1794262131364}