Auth bypass in Novakon P Series (P07, P10, P12, P15)

CVE-2025-9965

Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).

Vulnerability class: Broken Authentication

EPSS: 0.007 (48.0th percentile) — read the EPSS interpretation.