VULNERABILITY INTELLIGENCE

CVE-2025-54923

CVSS score8.7 HIGH
EPSS probability0.68%
CISA KEVNot currently listed
Published2025-08-20
Last modified2026-06-17

Description

CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity when authenticated users send crafted data to a network-exposed service that performs unsafe deserialization.