CVE-2025-61880

Status: AnalyzedHigh (8.8)—

In Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution.

CVSS

Version: 3.1
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base score: 8.8

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 0.61%
Percentile among all scored CVEs: 47
Score date: 10/5/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

🎯 ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

ExploitationT1210 Exploitation of Remote Serviceslateral movement85 %
Primary impactT1059 Command and Scripting Interpreterexecution90 %

Vector CVSS con AV:N y PR:L indica red con privilegios. CWE-502 es deserialización insegura. La descripción explícita de RCE confirma ejecución de código remota como impacto principal.

Inferred by our analysis agent from the official description, CVSS vector and CWE, and checked by a supervisor. May contain errors.

🛡️ ATT&CK mitigations that cover these techniques

Privileged Account Management Disable or Remove Feature or Program Vulnerability Scanning Threat Intelligence Program Restrict Web-Based Content Network Segmentation

Affected technologies (1)

Infoblox — Nios

CWEs

CWE-502

References

Raw JSON (NVD)

Show

{
  "id": "CVE-2025-61880",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-61880",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-02-12T20:29:11.943649Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-02-12T17:16:05.380",
  "references": [
    {
      "url": "https://infoblox.com",
      "tags": [
        "Product"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://support.infoblox.com/s/article/CVE-2025-61879-and-CVE-2025-61880",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution."
    },
    {
      "lang": "es",
      "value": "En Infoblox NIOS hasta 9.0.7, la deserialización insegura puede resultar en ejecución remota de código."
    }
  ],
  "lastModified": "2026-06-17T09:51:02.310",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:infoblox:nios:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5DE7934A-4662-4CF9-B043-44EADD22E6BB",
              "versionEndIncluding": "8.6.5",
              "versionStartIncluding": "8.6.0"
            },
            {
              "criteria": "cpe:2.3:o:infoblox:nios:8.5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FE880952-58F8-40E8-8F5E-FE5A7DC7D6E8"
            },
            {
              "criteria": "cpe:2.3:o:infoblox:nios:9.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D44707E2-736F-42E6-BA11-CE05CB6E47D8"
            },
            {
              "criteria": "cpe:2.3:o:infoblox:nios:9.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8BF1F283-793F-4C31-ADCC-FB9C4FAB8A0E"
            },
            {
              "criteria": "cpe:2.3:o:infoblox:nios:9.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0543C23-623E-4673-BF4D-20C7B6FDDF6F"
            },
            {
              "criteria": "cpe:2.3:o:infoblox:nios:9.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B69C585-31A4-4800-9CA0-BAFB9FE6AB27"
            },
            {
              "criteria": "cpe:2.3:o:infoblox:nios:9.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4DEFEEA-28C0-4F4B-AC23-61A6EC3651C5"
            },
            {
              "criteria": "cpe:2.3:o:infoblox:nios:9.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "77BC42F5-8727-4088-82C0-FE461307EB4E"
            },
            {
              "criteria": "cpe:2.3:o:infoblox:nios:9.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C24584B-F310-4CD5-BB6B-F99F41F7569F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}