VULNERABILITY INTELLIGENCE

CVE-2019-25736

CVSS score8.6 HIGH

EPSS probability0.15%

CISA KEVNot currently listed

Published2026-06-04

Last modified2026-07-22

Description

LabF nfsAxe 3.7 Ping Client contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload in the Host IP field. Attackers can craft a specially formatted input file with shellcode and overwrite the return address to execute calc.exe or other arbitrary commands.