← Back to browse · API

CVE-2025-5086

Severity
CRITICAL
CVSS
9.0
EPSS
0.89751
Risk score
56.41
CISA KEV
Yes
PoC
No
Published
2025-06-02
Modified
2026-02-26
First seen
2026-08-07
Aliases
EUVD-2025-16682, GHSA-7C63-XMGG-XRX5
Products
Dassault Systèmes:DELMIA Apriso, Dassault Systèmes:DELMIA Apriso Release 2020 Golden ≤Release 2020 SP4, Dassault Systèmes:DELMIA Apriso Release 2021 Golden ≤Release 2021 SP3, Dassault Systèmes:DELMIA Apriso Release 2022 Golden ≤Release 2022 SP3, Dassault Systèmes:DELMIA Apriso Release 2023 Golden ≤Release 2023 SP3, Dassault Systèmes:DELMIA Apriso Release 2024 Golden ≤Release 2024 SP1, Dassault Systèmes:DELMIA Apriso Release 2025 Golden ≤Release 2025 SP1
Sources
cisa.gov CVE-2025-5086
euvd EUVD-2025-16682

Description

A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.

References