CVE-2025-61168

CRITICAL EPSS 38.2%
Published Nov 25, 20257mo ago · Modified Jun 17, 20261w ago
9.8 CVSS 3.1
Critical
Find Similar
Published Nov 25, 2025 7mo ago
Last Modified Jun 17, 2026 1w ago

Description

An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute arbitrary code via unserializing an arbitrary file.

CVSS Details

Base Score
9.8
Exploitability
3.9
Impact
5.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
38.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-502 Deserialization of Untrusted Data Validation

Affected Products 1

VendorProductVersionRange
sigbpmb8.0.1.14any

References 4

  • pmb.com http://pmb.com
    Not Applicable
  • sigb.com http://sigb.com
    Product
  • forge.sigb.net https://forge.sigb.net/projects/pmb/wiki/Changelog_801#S%C3%A9curit%C3%A9-2
    Release Notes
  • gist.github.com https://gist.github.com/ZanyMonk/446f6875a2ceb3decef5ff1176428f9e
    Third Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.