Pivotal CRM CVE-2026-51947
CRITICALSeverity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Unauthenticated network-reachable deserialization yields low-complexity RCE (AV:N/AC:L/PR:N/UI:N) with full code execution driving high C/I/A; scope unchanged as code runs within the service context.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
3DescriptionCVE.org
An issue in Pivotal CRM 6.6.4.08 and systems using patch-ghi-15381-cwe-502-20251225.zip (fixed in Pivotal CRM 6.6.5.10 and Patch_CWE502_20260316.zip) allows a remote attacker to execute arbitrary code via the Pivotal.Engine.Client.Services.Conversion.dll component. NOTE: this issue exists because of an incomplete fix for CVE-2026-39253.
AnalysisAI
Remote code execution in Pivotal CRM 6.6.4.08 (Aurea) arises from insecure deserialization in the Pivotal.Engine.Client.Services.Conversion.dll component, letting remote attackers run arbitrary code on the server. This is a bypass of the incomplete fix for CVE-2026-39253, and it remains exploitable on systems that only applied the earlier patch-ghi-15381-cwe-502-20251225.zip. No public exploit code has been identified, though public advisories exist for both this issue and its predecessor; EPSS is modest at 0.57% (43rd percentile) and it is not in CISA KEV.
Technical ContextAI
The root cause is CWE-502 (Deserialization of Untrusted Data) in a .NET assembly, Pivotal.Engine.Client.Services.Conversion.dll, which is part of the Pivotal CRM Smart Client / PBS (Process-Based Server) stack. Insecure deserialization occurs when an application reconstructs objects from attacker-controlled serialized data without validating type or content; in .NET this commonly abuses BinaryFormatter/SoapFormatter-style gadget chains to achieve code execution during object graph reconstruction. Because CVE-2026-51947 is explicitly noted as an incomplete-fix regression of CVE-2026-39253, the original remediation left a reachable deserialization path in the Conversion component. Note that the CPE string supplied (cpe:2.3:a:n/a:n/a:*) is a placeholder ('n/a') and does not encode the real vendor/product, so exact affected-product enumeration relies on the description rather than machine-readable CPE.
RemediationAI
Vendor-released patch: upgrade to Pivotal CRM 6.6.5.10, or apply Patch_CWE502_20260316.zip to 6.6.4.08 systems, per the Aurea advisory at https://support.pivotal.aurea.com/article/129552-remediating-insecure-deserialization-cwe-502-in-pivotal-6-6-04-08-smart-client-pbs. Critically, do not treat the earlier patch-ghi-15381-cwe-502-20251225.zip as sufficient - it is the incomplete fix that this CVE bypasses, so re-patch even if that file was already installed. If patching cannot be done immediately, restrict network reachability of the Smart Client/PBS server so that the Conversion service is only accessible from trusted management networks (e.g., firewall the relevant service port/endpoint to a jump host or VPN), accepting the trade-off that legitimate remote clients on untrusted networks will lose direct access; additionally place a reverse proxy or WAF in front of the endpoint to inspect and block serialized-object payloads, recognizing that WAF signatures for .NET gadget chains are imperfect and can be evaded, so this is a stopgap and not a substitute for the patch.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-502 – Deserialization of Untrusted Data
View allShare
External POC / Exploit Code
Leaving vuln.today