CVE-2025-11739

Deserialization of Untrusted Data (CWE-502)

2026-03-10 cybersecurity@se.com

Deserialization RCE

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 18:17 nvd

N/A

DescriptionCVE.org

CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated attacker sends a crafted data stream, triggering unsafe deserialization.

Analysis

Technical ContextAI

Classified as CWE-502 (Deserialization of Untrusted Data). CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated attacker sends a crafted data stream, triggering unsafe deserialization.

Affected ProductsAI

CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locall

RemediationAI

Monitor vendor advisories for a patch.

CVE-2025-11739 vulnerability details – vuln.today

Back