ZDI-26-110 HIGH 7.8 Published Feb 19, 2026

Bosch Rexroth IndraWorks Print Settings File Parsing Deserialization Of Untrusted Data Remote Code Execution Vulnerability

Bosch

Bosch Rexroth IndraWorks contains a remote code execution vulnerability (CVE-2025-60037) that allows attackers to execute arbitrary code if a user visits a malicious page or opens a malicious file. This high-severity flaw (CVSS 7.8) requires user interaction to exploit but poses significant risk to industrial control environments using the affected software. Security teams should prioritize patching this vulnerability, restrict user access to untrusted files and websites, and monitor for suspicious activity targeting IndraWorks installations.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy