CVE 10 CRITICAL

Unauthenticated RCE via .NET Deserialization in Topal Finance Software_CVE-2025-10363

10 / 10
CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y

Description

Deserialization of Untrusted Data vulnerability in Topal Solutions AG Topal Finanzbuchhaltung on Windows allows Remote Code Execution.This issue affects at least Topal Finanzbuchhaltung: 10.1.5.20 and is fixed in version 11.2.12.00

Basic Information

ID CVE-2025-10363
Source NCSC.ch
Published Oct 6, 2025 at 16:38

Affected Product

Vendor Topal Solutions AG
Product Topal Finanzbuchhaltung
Version 10.1.5.20
Affected Versions Topal Solutions AG Topal Finanzbuchhaltung 10.1.5.20

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.