Is CVE-2025-11739 actively exploited?

No active exploitation of CVE-2025-11739 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-11739 be exploited remotely?

No. CVE-2025-11739 requires local access to exploit.

What is the CVSS score of CVE-2025-11739?

CVE-2025-11739 has a CVSS score of 8.5 (HIGH).

HOME VULNERABILITIESCVE-2025-11739

HIGH

CVE-2025-11739

CWE-502Published: March 10, 2026· Updated: Mar 11, 2026

8.5

CVSS v3.1

EPSS:0.07%probability of exploitation in 30 daysPercentile:20.1th

Official Description

CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated attacker sends a crafted data stream, triggering unsafe deserialization.

NVD Source

Technical Analysis

CVE-2025-11739 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

From a weakness classification perspective (CWE-502): Insecure deserialization vulnerabilities allow attackers to inject malicious objects during deserialization, potentially enabling remote code execution.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

News & Research Mentioning CVE-2025-11739

Schneider Electric EcoStruxure PME and EPO

CISA Alerts· Mar 19, 2026

View CSAF Summary Schneider Electric is aware of a vulnerability in its EcoStruxure Power Monitoring Expert (PME) and EcoStruxure Power Operation (EPO) products. EcoStruxure Power Monitoring Expert (PME) is an on-premises software used to help power critical and energy-intensive facilities maximize uptime and operational efficiency. EcoStruxure Power Operation (EPO) are on-premises software offers that provides a single platform to monitor and control medium and lower power systems.Failure to apply the fix provided below may risk local arbitrary code execution, which could result in the local system being compromised, a disruption of operations, and/or unauthorized administrative control of the system. The following versions of Schneider Electric Eco [xlite_meta score:73 src:CISA Alerts xlite_fp:47f9b466a54eeec201281ece16e0532c022ed9da7c4fd2923dea53a445a742c3]