Remote Code Execution Vulnerability in Rexroth IndraWorks OPC.Testclient
CVE-2025-60035

7.8HIGH

Key Information:

Vendor
CVE Published:
18 February 2026

What is CVE-2025-60035?

A vulnerability has been discovered in the OPC.Testclient utility, part of Rexroth IndraWorks, affecting all versions prior to 15V24. This flaw arises from improper parsing of manipulated files containing malicious serialized data. When a user opens a specially crafted file, it leads the application to deserialize the harmful data, which can result in the execution of arbitrary code on the user’s system. Successful exploitation requires user interaction and poses a significant security risk, as it could lead to the complete compromise of the affected system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

IndraWorks 0 < 15V24

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.