PT-2025-48070 · Sigb Pmb · Sigb Pmb

CVE-2025-61168 · Publicado 2025-11-25 · Atualizado 2025-12-01

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SIGB PMB version 8.0.1.14

Description An issue in the cms rest.php component allows attackers to execute arbitrary code by unserializing an arbitrary file. The component cms rest.php is susceptible to code execution through the unserialization of files. The vulnerable parameter is not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2025-61168

Produtos afetados

Sigb Pmb

Referências · 8

• https://forge.sigb.net/projects/pmb/wiki/Changelog_801#S%C3%A9curit%C3%A9-2 · Nota
• https://twitter.com/CVEnew/status/1993397930951135724 · Publicação no Twitter
• http://pmb.com · Nota
• http://sigb.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-61168 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-61168 · Aviso do Fabricante
• https://t.me/cveNotify/144401 · Publicação no Telegram
• https://gist.github.com/ZanyMonk/446f6875a2ceb3decef5ff1176428f9e · Nota