CVE-2025-40942

High · 7.8

CVSS

7.8

EPSS

0.2%

Published

Jan 13, 2026

CISA due date

—

The record

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.4). Affected application contains a local privilege escalation vulnerability that could allow an attacker to run arbitrary code with elevated privileges.

Affected packages

Ecosystem	Package	Introduced	Fixed