CVE-2026-8024 Deserialization vulnerability in ibaPDA and ibaDatCoordinator
CriticalCVSS 9.3
EPSS 0.55%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A remote, unauthenticated attacker may exploit a deserialization of untrusted data vulnerability in ibaPDA or ibaDatCoordinator to gain full access to the affected systems.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibaPDA | >= 1.0.0, < 8.14.0 | 8.14.0 |
| ibaDatCoordinator | >= 1.0.0, < 4.0.7 | 4.0.7 |
References
- iba.csaf-tp.certvde.com vendor-advisory
- certvde.com third-party-advisory