VULNERABILITY INTELLIGENCE

CVE-2025-11739

CVSS score8.5 HIGH

EPSS probability0.19%

CISA KEVNot currently listed

Published2026-03-10

Last modified2026-06-24

Description

CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated attacker sends a crafted data stream, triggering unsafe deserialization.