VULNERABILITY INTELLIGENCE

CVE-2025-5086

CVSS score9 CRITICAL

EPSS probability97.04%

CISA KEVKnown exploited vulnerability

Published2025-06-02

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Known Exploited Vulnerability

Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

Vendor / product: Dassault Systèmes / DELMIA Apriso

Description

A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.

Weakness classification

3DS.Information-Security@3ds.com: CWE-502

Primary references

3DS.Information-Security@3ds.com — Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Technical Description, Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource