Privilege escalation in Novakon P Series (P07, P10, P12, P15)
CVE-2025-9966
Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).
Vulnerability class: Privilege Escalation
EPSS: 0.003 (27.1th percentile) — read the EPSS interpretation.
Affected products
- Novakon P Series (P07, P10, P12, P15) — versions P – V2001.A.c518o2
Weakness classification (CWE)
References
- office@cyberdanube.com
- office@cyberdanube.com (vendor-advisory)
- office@cyberdanube.com (vendor-advisory)
- af854a3a-2127-422b-91ae-364da2661108