Remote Code Execution Vulnerability in Rexroth IndraWorks UA.Testclient Utility
CVE-2025-60036

7.8HIGH

Key Information:

Vendor
CVE Published:
18 February 2026

What is CVE-2025-60036?

A security flaw in the UA.Testclient utility, part of Rexroth IndraWorks, allows attackers to execute arbitrary code on affected systems. By exploiting this vulnerability, which requires user interaction to open a crafted file containing malicious serialized data, attackers can trigger the deserialization of this data, leading to the potential takeover of the host system. This issue affects all versions prior to 15V24, underscoring the critical need for users to update their software to mitigate risks associated with unauthorized system access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

IndraWorks 0 < 15V24

UA.Testclient 0 < 2.9.0

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.