CVE-2025-7916 CRITICAL

CVE-2025-7916: Simopro Technology｜WinMatrix3 - Insecure Deserialization

Vendor Simopro Technology
Product WinMatrix3
Weakness CWE-502 · Unsafe deserialization
Published July 21, 2025
Last update July 21, 2025
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized contents.

Key dates

02Disclosure timeline

July 21, 2025 CVE published
July 21, 2025 Record updated