CVE-2026-8024

A remote, unauthenticated attacker may exploit a deserialization of untrusted data vulnerability in ibaPDA or ibaDatCoordinator to gain full access to the affected systems.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - info@cert.vde.com

Published

2026-06-18

Last modified

2026-06-18

Weaknesses

CWE-502

Affected products

• Ibadatcoordinator (Iba)
• Ibapda (Iba)

References

• https://certvde.com/en/advisories/VDE-2026-051
• https://iba.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-051.json