CVE-2025-53772CWE-502

Web Deploy Remote Code Execution Vulnerability

High · published August 12, 2025

CVSS v3.1

8.8

EPSS

28%

Percentile

98.1

In the wild

Unconfirmed

What it is

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network.

The record

Technical detail

CVSS v3.1: 8.8 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0: Not supplied
EPSS: 0.27749 · 98.1th percentile
Weakness: CWE-502 · Deserialization of Untrusted Data
Published: 2025-08-12T17:09Z

EPSS history

Timeline

12 AUG 17:09Z
Web Deploy Remote Code Execution Vulnerability
cvelistv5