Remote Code Execution Vulnerability in Rexroth IndraWorks UA.Testclient Utility
CVE-2025-60036
Key Information:
- Vendor
Bosch Rexroth
- Status
- Vendor
- CVE Published:
- 18 February 2026
What is CVE-2025-60036?
A security flaw in the UA.Testclient utility, part of Rexroth IndraWorks, allows attackers to execute arbitrary code on affected systems. By exploiting this vulnerability, which requires user interaction to open a crafted file containing malicious serialized data, attackers can trigger the deserialization of this data, leading to the potential takeover of the host system. This issue affects all versions prior to 15V24, underscoring the critical need for users to update their software to mitigate risks associated with unauthorized system access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
IndraWorks 0 < 15V24
UA.Testclient 0 < 2.9.0
