July 25, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-67859NVD

Vulnerability Summary

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power
profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1.
Severity Level
MEDIUM(5.1)
Published Date
Jan 14, 2026
Last Modified
Jan 14, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-287: Improper Authentication ↗
When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.
CVSS v4.0 Base Metrics
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone

External References