{"id":"CVE-2025-9966","title":"Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build\n                      2026.02.06 …","summary":"Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build\n                      2026.02.06 …","severity":"none","cwe":["CWE-269"],"published":"2025-09-23","updated":"2026-09-30","sourceUpdated":"2026-09-30T23:10:00.237","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-9966","references":[{"url":"https://cyberdanube.com/security-research/multiple-vulnerabilities-in-novakon-hmi-series/","label":"office@cyberdanube.com"},{"url":"https://www.novakon.com.tw/common/frontend/download?path=/uploads/images/support/download/NOVAKON_P-Series-HMI_Security-Advisory_CVE-2025-9962-9966_Rev2_0.pdf","label":"office@cyberdanube.com"},{"url":"https://www.novakon.com.tw/en/news/detail/Security_Advisory__Firmware_Update_Available_for_NOVAKON_P_Series_HMI_Products","label":"office@cyberdanube.com"},{"url":"http://seclists.org/fulldisclosure/2025/Sep/70","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.00358,"epssPercentile":0.2714,"ingestedAt":"2026-09-30T23:29:32.402Z","slug":"CVE-2025-9966","body":"## Overview\n\nImproper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build\n                      2026.02.06 (commit d0f97fd9).\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}