CVE-2025-9963: Novakon P Series p07, p10, p12, p15

Critical severity, CVSS 9.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A path traversal vulnerability in Novakon P series allows to expose the root file system "/" and modify all files with root permissions. This way the system can also be compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).

Affected products

• Novakon P Series p07, p10, p12, p15

Published 2025-09-23. Last modified 2026-06-17.