CVE-2025-59698

PoC —

CVSS 3.1

6.8 medium

EPSS

<1%p26

Published

Dec 2, 2025 (Dec 2, 2025)

Modified

Aug 26, 2026

Description

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow a physically proximate attacker to gain access to the EOL legacy bootloader.

Vendors: entrust
Products: nshield 5c firmware, nshield hsmi firmware, nshield connect xc base firmware, nshield connect xc mid firmware, nshield connect xc high firmware
Weakness: CWE-1270
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.