CVE-2019-25572: Nordvpn

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash.

Affected products

• Nordvpn Nordvpn: up to and including 6.19.6

Published 2026-03-21. Last modified 2026-10-07.