CVE-2025-41686: Phoenix Contact Daum

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

A low-privileged local attacker can exploit improper permissions on nssm.exe to escalate their privileges and gain administrative access.

Affected products

• Phoenix Contact Daum: from 0.0.0, before 2025.3.1 (fixed in 2025.3.1)

Published 2025-08-12. Last modified 2026-06-17.