CVE-2018-25368 — Nord VPN 6.14.31 Denial of Service via Password Field
Nord VPN 6.14.31 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting an excessively long string in the passwo…
Published: 2026-05-25 · CVSS: 8.7 · CVSS 4.0
Nord VPN 6.14.31 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting an excessively long string in the password field. Attackers can paste a buffer of repeated characters into the password input field to trigger an application crash when attempting to authenticate.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7