CVE-2025-9964: Novakon P Series p07, p10, p12, p15

High severity, CVSS 8.6. EPSS: 0.2% chance of exploitation in the next 30 days.

No password for the root user is set in Novakon P series. This allows phyiscal attackers to enter the console easily. This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).

Affected products

  • Novakon P Series p07, p10, p12, p15

Published 2025-09-23. Last modified 2026-09-26.