CVE-2022-33035: Netsarang Xlpd

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.

Affected products

• Netsarang Xlpd: before 7.0.0103 (fixed in 7.0.0103)

Published 2022-06-29. Last modified 2026-06-17.