A remote, unauthenticated attacker may exploit a deserialization of untrusted data vulnerability in ibaPDA or ibaDatCoordinator to gain full access to the affected systems.
CVSS 4.0CRITICAL 9.3·Network·No auth·No interaction·EPSS 0.00553·Published 2026-06-18·Fixed in 8.14.0, 4.0.7CWE-502