9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Insecure deserialization of untrusted input in StellarGroup HPX 1.11.0 under certain conditions may allow attackers to execute arbitrary code or other unspecified impacts.
AI Analysis
Insecure deserialization vulnerability in StellarGroup HPX allowing arbitrary code execution
Basic Information
ID
CVE-2025-60889
Source
mitre
Published
Apr 28, 2026 at 00:00
Modified
Apr 30, 2026 at 15:22
Affected Product
Vendor
StellarGroup
Product
HPX
Version
1.11.0
Affected Versions
n/a n/a n/a
CWE Classification
AI Assessment
AI Score
9.8 / 10
AI Severity
Critical
Vendor
StellarGroup
Product
HPX
Version
1.11.0