CVE-2025-60038CWE-502

A vulnerability has been identified in Rexroth IndraWorks

High · published February 18, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
27.3
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing malicious serialized data. Exploitation requires user interaction, specifically opening a specially crafted file, which then causes the application to deserialize the malicious data, enabling Remote Code Execution (RCE). This can lead to a complete compromise of the system running Rexroth IndraWorks.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00349 · 27.3th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-02-18T14:03Z
EPSS history
Timeline
  • 18 FEB 14:03Z
    A vulnerability has been identified in Rexroth IndraWorks
    cvelistv5