VULNERABILITY INTELLIGENCE
CVE-2019-25343
CVSS score7.8 HIGH
EPSS probability0.13%
CISA KEVNot currently listed
Published2026-02-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
NextVPN 4.10 contains an insecure file permissions vulnerability that allows local users to modify executable files with full access rights. Attackers can replace system executables with malicious files to gain SYSTEM or Administrator privileges through unauthorized file modification.
Weakness classification
- disclosure@vulncheck.com: CWE-732