CVE-2019-25308: Mikogo

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Mikogo 5.2.2.150317 contains an unquoted service path vulnerability in the Mikogo-Service Windows service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with LocalSystem privileges by placing executable files in specific path locations.

Affected products

• Mikogo Mikogo: version 5.2.150317 only

Published 2026-02-11. Last modified 2026-06-17.