PT-2026-7879 · Vm3Max · Nextvpn

Sajjadbnd · Published 2026-02-12 · Updated 2026-02-12 · CVE-2019-25343

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NextVPN version 4.10

Description Insecure file permissions allow local users to modify executable files with full access rights. This can lead to the replacement of system executables with malicious files, enabling an attacker to gain SYSTEM or Administrator privileges through unauthorized file modification.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2019-25343

Affected Products

Nextvpn

References · 4

• 🔥 https://exploit-db.com/exploits/47831 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25343 · Security Note
• https://vulncheck.com/advisories/nextvpn-insecure-file-permissions · Note
• https://vm3max.site · Note