Medium severity4.3NVD Advisory· Published Dec 24, 2025· Updated Apr 15, 2026

CVE-2019-25255

Description

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery (CSRF) mechanism to gain unauthorized system access.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.video-flow.comnvd
www.exploit-db.com/exploits/44387nvd
www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5455.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000