Read the docs
TI-2025-00915 Aliases CVE-2025-1077GHSA-w762-973h-phj5

Improper input validation in IBL Software Engineering Visual Weather

Priority MEDIUM 44CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Attack requirements
Present
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-502.

Summary

A security vulnerability has been identified in the IBL Software Engineering Visual Weather and derived products (NAMIS, Aero Weather, Satellite Weather). The vulnerability is present in the Product Delivery Service (PDS) component in specific server configurations where the PDS pipeline utilizes the IPDS pipeline with Message Editor Output Filters enabled. A remote unauthenticated attacker can exploit this vulnerability to send unauthenticated requests to execute the IPDS pipeline with specially crafted Form Properties, enabling remote execution of arbitrary Python code. This vulnerability could lead to a full system compromise of the affected server, particularly if Visual Weather services are run under a privileged user account—contrary to the documented installation best practices. Upgrade to the patched versions 7.3.10 (or higher), 8.6.0 (or higher).

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00858 58th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IBL Software EngineeringVisual Weather8.2.5; 7.3.9; 7.3.6 (Enterprise Build); 8.5.2 (Enterprise Build)—No fix listedCNA
IBL Software EngineeringNAMIS8.2.5; 7.3.9; 7.3.6 (Enterprise Build); 8.5.2 (Enterprise Build)—No fix listedCNA
IBL Software EngineeringAero Weather8.2.5; 7.3.9; 7.3.6 (Enterprise Build); 8.5.2 (Enterprise Build)—No fix listedCNA
IBL Software EngineeringSatellite Weather8.2.5; 7.3.9; 7.3.6 (Enterprise Build); 8.5.2 (Enterprise Build)—No fix listedCNA
  • Visual Weather VendorIBL Software Engineering Affected 8.2.5; 7.3.9; 7.3.6 (Enterprise Build); 8.5.2 (Enterprise Build) Fixed in — No fix listed CNA
  • NAMIS VendorIBL Software Engineering Affected 8.2.5; 7.3.9; 7.3.6 (Enterprise Build); 8.5.2 (Enterprise Build) Fixed in — No fix listed CNA
  • Aero Weather VendorIBL Software Engineering Affected 8.2.5; 7.3.9; 7.3.6 (Enterprise Build); 8.5.2 (Enterprise Build) Fixed in — No fix listed CNA
  • Satellite Weather VendorIBL Software Engineering Affected 8.2.5; 7.3.9; 7.3.6 (Enterprise Build); 8.5.2 (Enterprise Build) Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-1077
  2. 2026-10-03 Alias added: GHSA-w762-973h-phj5

References

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences