← All advisories

Critical severity9.8NVD Advisory· Published Mar 10, 2026· Updated Jul 5, 2026

CVE-2025-56422

CVE-2025-56422

Description

A deserialization vulnerability in LimeSurvey before v6.15.0+250623 allows a remote attacker to execute arbitrary code on the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Limesurvey/Limesurvey3 versions
cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*range: <=6.14.3
- (no CPE)
- (no CPE)range: <v6.15.0+250623

Patches

Vulnerability mechanics

References

1

github.com/hongancalif/security-advisories/blob/main/CVE-2025-56422.mdnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.