Path Traversal in Novakon P Series (P07, P10, P12, P15)
CVE-2025-9963
A path traversal vulnerability in Novakon P series allows to expose the root file system "/" and modify all files with root permissions. This way the system can also be compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.002 (11.0th percentile) — read the EPSS interpretation.
Affected products
- Novakon P Series (P07, P10, P12, P15) — versions P – V2001.A.c518o2
Weakness classification (CWE)
References
- office@cyberdanube.com
- office@cyberdanube.com (vendor-advisory)
- office@cyberdanube.com (vendor-advisory)
- af854a3a-2127-422b-91ae-364da2661108