CVE-2026-8024: Deserialization vulnerability in ibaPDA and ibaDatCoordinator

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-18 · updated 2026-06-22
Weakness: CWE-502

Description

A remote, unauthenticated attacker may exploit a deserialization of untrusted data vulnerability in ibaPDA or ibaDatCoordinator to gain full access to the affected systems.

Affected products

ibaDatCoordinator: from 1.0.0 before 4.0.7 — fixed in 4.0.7
ibaPDA: from 1.0.0 before 8.14.0 — fixed in 8.14.0

How to fix

Upgrade to a fixed version: ibaDatCoordinator 4.0.7; ibaPDA 8.14.0. Check the vendor advisory for mitigations.

References

https://certvde.com/en/advisories/VDE-2026-051
https://iba.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-051.json

Get alerted when CVE-2026-8024 or the next vulnerability affects your stack