VULNERABILITY INTELLIGENCE
CVE-2025-65118
CVSS score9.3 CRITICAL
EPSS probability0.25%
CISA KEVNot currently listed
Published2026-01-16
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Description
The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to trick Process Optimization services into loading arbitrary code and escalate privileges to OS System, potentially resulting in complete compromise of the Model Application Server.
Weakness classification
- CWE-427: Uncontrolled Search Path Element
Primary references
- ics-cert@hq.dhs.gov — Third Party Advisory
- ics-cert@hq.dhs.gov — Permissions Required
- ics-cert@hq.dhs.gov — Vendor Advisory
- ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource