VULNERABILITY INTELLIGENCE

CVE-2025-2566

CVSS score9.3 CRITICAL

EPSS probability0.65%

CISA KEVNot currently listed

Published2025-06-24

Last modified2026-06-17

Description

Kaleris NAVIS N4 ULC (Ultra Light Client) contains an unsafe Java deserialization vulnerability. An unauthenticated attacker can make specially crafted requests to execute arbitrary code on the server.