CVE-2019-25343

8.5 highEPSS 0.1%

High (8.5). EPSS 0.1% chance of exploitation in the next 30 days.

NextVPN 4.10 contains an insecure file permissions vulnerability that allows local users to modify executable files with full access rights. Attackers can replace system executables with malicious files to gain SYSTEM or Administrator privileges through unauthorized file modification.

Severity

CVSS 4.0

8.5 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2026-02-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://vm3max.site
https://www.exploit-db.com/exploits/47831
https://www.vulncheck.com/advisories/nextvpn-insecure-file-permissions

Check your stack JSON