CVE-2019-25308CWE-428

Mikogo 5.2.2.150317 - 'Mikogo-Service' Unquoted Service Path

High · published February 11, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

⚡ An unquoted service path in Mikogo 5.2.2.150317 opens the door to attackers like a welcome mat for unwanted guests! 🎉 Think of this as a restaurant where the chef only checks the first part of the order — if someone sneaks a dish in without being fully vetted, it could lead to chaos in the kitchen! 🍽️ Exploiting this vulnerability could allow an attacker to inject and execute malicious code with LocalSystem privileges, effectively giving them control over the affected system. This could lead to anything from data theft to outright system takeover, turning your trusted environment into a playground for cybercriminals!

Put simply

Think of this as a restaurant where the chef only checks the first part of the order — if someone sneaks a dish in without being fully vetted, it could lead to chaos in the kitchen! 🍽️ The unquoted service path vulnerability allows attackers to execute arbitrary code by placing malicious executables in directory paths that the service does not properly quote. This means the service cannot accurately identify legitimate files from rogue ones, leading to severe security breaches.

What to do

Exploiting this vulnerability could allow an attacker to inject and execute malicious code with LocalSystem privileges, effectively giving them control over the affected system. This could lead to anything from data theft to outright system takeover, turning your trusted environment into a playground for cybercriminals! To mitigate this issue, update Mikogo to the latest version that addresses this vulnerability. Additionally, review service paths to ensure they are quoted correctly, and perform regular security audits to identify similar vulnerabilities. You've got this! Stay vigilant, and by following these steps, you'll enhance your security and keep your systems safe! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00247 · 15.1th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-02-11T14:56Z
EPSS history
Timeline
  • 11 FEB 14:56Z
    Mikogo 5.2.2.150317 - 'Mikogo-Service' Unquoted Service Path
    cvelistv5