CVE-2019-25343CWE-732
NextVPN 4.10 - Insecure File Permissions
High · published February 12, 2026
What it is
NextVPN 4.10 contains an insecure file permissions vulnerability that allows local users to modify executable files with full access rights. Attackers can replace system executables with malicious files to gain SYSTEM or Administrator privileges through unauthorized file modification.
The record
Technical detail
- CVSS v4.0
- 8.5 · HIGH
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS
- 0.00125 · 2.0th percentile
- Weakness
- CWE-732 · Incorrect Permission Assignment for Critical Resource
- Published
- 2026-02-12T19:02Z
EPSS history
Timeline