CVE-2023-48957: Purevpn

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers.

Affected products

• Purevpn Purevpn: version 2.0.2 only

Published 2024-08-25. Last modified 2026-06-17.