CVE-2025-9965: Novakon P Series p07, p10, p12, p15

Critical severity, CVSS 9.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).

Affected products

• Novakon P Series p07, p10, p12, p15

Published 2025-09-23. Last modified 2026-06-17.