CVE-2018-25296: p10 Central Management Software

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

P10 Central Management Software 1.4.13 contains a buffer overflow vulnerability in the login password field that allows local attackers to crash the application by submitting an oversized input string. Attackers can paste a 2000-byte payload into the password field and click login to trigger an application crash and denial of service.

Affected products

• p10 Central Management Software: version 1.4.13 only

Published 2026-04-26. Last modified 2026-06-17.