CVE-2025-10363
Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-10-06

Last updated on: 2025-10-08

Assigner: Switzerland Government Common Vulnerability Program

Description
Deserialization of Untrusted Data vulnerability in Topal Solutions AG Topal Finanzbuchhaltung on Windows allows Remote Code Execution.This issue affects at least Topal Finanzbuchhaltung: 10.1.5.20 and is fixed in version 11.2.12.00

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-10-06
Last Modified
2025-10-08
Generated
2026-07-06
AI Q&A
2025-10-06
EPSS Evaluated
2026-07-05
NVD
CVE-2025-10363
EUVD
EUVD-2025-32161

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
topal_solutions_ag topal_finanzbuchhaltung 11.2.12.00
topal_solutions_ag topal_finanzbuchhaltung 10.1.5.20

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Deserialization of Untrusted Data issue in Topal Solutions AG's Topal Finanzbuchhaltung software on Windows. It allows an attacker to execute remote code on the affected system by exploiting the way the software processes untrusted serialized data. This means that malicious data can be crafted to run arbitrary code remotely, potentially taking full control of the system. The vulnerability affects versions up to 10.1.5.20 and is fixed in version 11.2.12.00.

Impact Analysis

The vulnerability can lead to Remote Code Execution (RCE) on the affected system, which is a critical security risk. An attacker exploiting this flaw could gain full control over the system running Topal Finanzbuchhaltung, potentially leading to data theft, data manipulation, disruption of business operations, or further network compromise.

Mitigation Strategies

The immediate step to mitigate this vulnerability is to upgrade Topal Finanzbuchhaltung to version 11.2.12.0 or later, as this version includes the security update that fixes the critical deserialization vulnerability allowing remote code execution. [1]

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-10363. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart