Is CVE-2019-25343 actively exploited?

No active exploitation of CVE-2019-25343 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2019-25343 be exploited remotely?

No. CVE-2019-25343 requires local access to exploit.

What is the CVSS score of CVE-2019-25343?

CVE-2019-25343 has a CVSS score of 7.8 (HIGH) and an EPSS exploitation probability of 0.01%.

HOME VULNERABILITIESCVE-2019-25343

HIGH

CVE-2019-25343

CWE-732Published: February 12, 2026· Updated: Feb 13, 2026

7.8

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:1.0th

Official Description

NextVPN 4.10 contains an insecure file permissions vulnerability that allows local users to modify executable files with full access rights. Attackers can replace system executables with malicious files to gain SYSTEM or Administrator privileges through unauthorized file modification.

NVD Source

Technical Analysis

CVE-2019-25343 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.