New vulnerabilities in tunneling protocols could allow cyberattacks, including hijacking and denial-of-service (DoS), according to research from Top10VPN and KU Leuven professor Mathy Vanhoef. Around 4.2 million hosts — VPN servers, ISP home routers, content delivery network nodes, mobile network gateways, and core internet routers — could be susceptible. Main affected countries are China, France, Japan, the U.S., and Brazil. The vulnerabilities occur because protocols like IP6IP6, 4in6, GRE6, and 6in4 don’t authenticate or encrypt traffic without security protocols like IPsec.
IXON VPN Vulnerabilities Let Attackers Gain Access to Windows & Linux Systems
A security assessment by Shelltrail revealed three critical vulnerabilities in the IXON VPN client, allowing privilege escalation on Windows and Linux. Identified as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02,
%20CISO%E2%80%99s%20Core%20Focus.webp?w=0&resize=0,0&ssl=1 "Identity and Access Management (IAM)")