What’s Vulnerable › Vulnerabilities

CVE-2024-57426

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-06 · updated 2026-06-17
• Weakness: CWE-427

Description

NetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads dependencies. This vulnerability arises due to the improper validation of dynamically loaded libraries.

References

• https://github.com/iamsinghmanish/My-CVEs/tree/main/CVE-2024-57426
• https://sourceforge.net/projects/netmodhttp/

Get alerted when CVE-2024-57426 or the next vulnerability affects your stack