What’s Vulnerable › Vulnerabilities

CVE-2019-25343: NextVPN 4.10 - Insecure File Permissions

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-12 · updated 2026-06-17
• Weakness: CWE-732

Description

NextVPN 4.10 contains an insecure file permissions vulnerability that allows local users to modify executable files with full access rights. Attackers can replace system executables with malicious files to gain SYSTEM or Administrator privileges through unauthorized file modification.

Affected products

• Vm3Max NextVPN: 4.10

References

• https://vm3max.site
• https://www.exploit-db.com/exploits/47831
• https://www.vulncheck.com/advisories/nextvpn-insecure-file-permissions

Get alerted when CVE-2019-25343 or the next vulnerability affects your stack