ZDI-26-110
HIGH 7.8
Published
Feb 19, 2026
Bosch Rexroth IndraWorks Print Settings File Parsing Deserialization Of Untrusted Data Remote Code Execution Vulnerability
Bosch
Bosch Rexroth IndraWorks contains a remote code execution vulnerability (CVE-2025-60037) that allows attackers to execute arbitrary code if a user visits a malicious page or opens a malicious file. This high-severity flaw (CVSS 7.8) requires user interaction to exploit but poses significant risk to industrial control environments using the affected software. Security teams should prioritize patching this vulnerability, restrict user access to untrusted files and websites, and monitor for suspicious activity targeting IndraWorks installations.