CVE-2025-58384

CriticalCVSS 10.0/10Last modified Jun 17, 2026

Description

In DOXENSE WATCHDOC before 6.1.1.5332, Deserialization of Untrusted Data can lead to remote code execution through the .NET Remoting library in the Watchdoc administration interface.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published: Sep 26, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-583857.1In DOXENSE WATCHDOC before 6.1.0.5094, private user puk codes can be disclosed for Active Directory registered users (there is hard-coded an CVE-2025-583869.8In Terminalfour 8 through 8.4.1.1, the userLevel parameter in the user management function is not subject to proper server-side authorizatio CVE-2025-58398.8A vulnerability, which was classified as critical, has been found in Tenda AC9 15.03.02.13. Affected by this issue is the function fromadvse CVE-2025-58407.3A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknow CVE-2025-584008.4RATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc. registers a Windows service with an unquoted file path. A user wit CVE-2025-584015.1Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauth CVE-2025-584027.5The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks. By modifying the pa CVE-2025-584035.1CGM CLININET is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of user-supplied data. A remote unauthenti CVE-2025-584056.1The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-bas CVE-2025-584064.3The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MI CVE-2025-584077.4Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trig CVE-2025-584085.9Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to ke