CVE-2025-14600 in vsDeskinformação

Sumário

de MITRE • 19/08/2026

An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized administrative access. By manipulating application configuration data, an attacker can force the system to authenticate against an arbitrary LDAP server and provision a new administrative account.




Apply patch from vendor https://vsdesk.ru/ . Versions 14.0402 and on have the patch.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

Kaspersky

Reservar

12/12/2025

Divulgação

19/08/2026

Moderação

aceite

Entrada

VDB-393270

CPE

pronto

EPSS

0.00374

KEV

não

Atividades

baixo

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-14600
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-14600
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-14600/

◂ VoltarVisão GeralPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!