ICSA-26-225-01

AVEVA Enterprise SCADA Insecure Deserialization Flaw Enables Arbitrary Code Execution CVE-2025-7639

CISA ICS Advisory ICSA-26-225-01 warns of an unsafe deserialization flaw in AVEVA Enterprise SCADA systems allowing remote code execution on critical control nodes.