CVE-2026-27776
Insecure Deserialization in intra-mart IM-LogicDesigner Enables RCE
Publication date: 2026-02-27
Last updated on: 2026-03-23
Assigner: JPCERT/CC
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| intra-mart | accel_platform | 8.0.16 |
| intra-mart | accel_platform | 8.0.17 |
| intra-mart | accel_platform | 8.0.19 |
| intra-mart | accel_platform | 8.0.20 |
| intra-mart | accel_platform | 8.0.21 |
| intra-mart | accel_platform | 8.0.22 |
| intra-mart | accel_platform | 8.0.23 |
| intra-mart | accel_platform | 8.0.24 |
| intra-mart | accel_platform | 8.0.25 |
| intra-mart | accel_platform | 8.0.26 |
| intra-mart | accel_platform | 8.0.27 |
| intra-mart | accel_platform | 8.0.10 |
| intra-mart | accel_platform | 8.0.11 |
| intra-mart | accel_platform | 8.0.12 |
| intra-mart | accel_platform | 8.0.13 |
| intra-mart | accel_platform | 8.0.14 |
| intra-mart | accel_platform | 8.0.15 |
| intra-mart | accel_platform | 8.0.4 |
| intra-mart | accel_platform | 8.0.5 |
| intra-mart | accel_platform | 8.0.6 |
| intra-mart | accel_platform | 8.0.7 |
| intra-mart | accel_platform | 8.0.8 |
| intra-mart | accel_platform | 8.0.9 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-502 | The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability exists in the IM-LogicDesigner module of the intra-mart Accel Platform and is an insecure deserialization issue.
It can be exploited only when the IM-LogicDesigner module is deployed on the system.
An attacker can execute arbitrary code by importing a specially crafted file, but this requires the user to have administrative privileges.
How can this vulnerability impact me? :
This vulnerability can lead to arbitrary code execution on the affected system.
Since exploitation requires administrative privileges, an attacker with such access can execute malicious code, potentially compromising the confidentiality, integrity, and availability of the system.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
I don't know