Arbitrary Code Execution Vulnerability in SPH Engineering UgCS
CVE-2025-60595

8.2HIGH

Key Information:

Vendor

SPH Engineering

Status
UgCS
Vendor
CVE Published:
29 October 2025

What is CVE-2025-60595?

SPH Engineering UgCS version 5.13.0 has a vulnerability that allows for arbitrary code execution, enabling attackers to execute malicious code on an affected system. This could lead to unauthorized access and potential compromise of sensitive data. Organizations using this version should take immediate action to assess their exposure and implement appropriate security measures.

References

https://www.sphengineering.com
https://github.com/Clicksafeae/CVE-2025-60595/tree/main

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.