Critical severityNVD Advisory· Published Aug 19, 2026· Updated Aug 19, 2026

CVE-2025-14600

Description

An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized administrative access. By manipulating application configuration data, an attacker can force the system to authenticate against an arbitrary LDAP server and provision a new administrative account.

Apply patch from vendor https://vsdesk.ru/ . Versions 14.0402 and on have the patch.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VsDesk/vsDeskllm-fuzzy
Range: >=14.0402

Patches

Vulnerability mechanics

References

github.com/klsecservices/Advisories/blob/master/KLSA-00296-Admin-Account-Takeover-via-Path-Traversal-in-vsDesk.mdnvd
vsdesk.ru/news/vyshla-novaya-versiya-140422nvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000