CVE-2025-10363CWE-502insecure-deserialization

CVE-2025-10363

published October 6, 2025

CVSS
10.0
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

Deserialization of Untrusted Data vulnerability in Topal Solutions AG Topal Finanzbuchhaltung on Windows allows Remote Code Execution.This issue affects at least Topal Finanzbuchhaltung: 10.1.5.20 and is fixed in version 11.2.12.00

The record
Technical detail
CVSS
10.0 · NONE
CVSS v4.0
Not supplied
EPSS
0.00557 · 45.7th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2025-10-06T21:16Z
References (2)
https://info.topal.ch/content/info/Topal_ReleaseNotes/de/version_v11_2_12_0.htm · [email protected]https://labs.infoguard.ch/advisories/cve-2025-10363_topal_deserialization_unauth_rce/ · [email protected]
EPSS history
Timeline
  • 06 OCT 16:38Z
    Unauthenticated RCE via .NET Deserialization in Topal Finance Software
    cvelistv5