Vulnerabilities

CVSS

7.1 High

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H

Risk score

56.8

Published

2026-08-14

Status

Received

The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code execution during deserialization under the privilege of Enterprise SCADA security group "DNA Apps".

Weaknesses

CWE-502

Coverage 1

vulnerability

AVEVA Enterprise SCADA

A critical vulnerability (CVE-2025-7639) has been identified in AVEVA Enterprise SCADA, allowing an authenticated attacker with specific privileges to tamper with serialized data and potentially execute code. This vulner…

CISA Advisories · Aug 13, 2026 High

CVE-2025-7639cve-2025-7639deserializationcode execution

All articles mentioning it

Advisories and references

• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...
• aveva.com/content/dam/aveva/documents/support/cyber-security-updates...
• cisa.gov/news-events/ics-advisories/icsa-26-225-01