CVE-2026-8024 — Deserialization vulnerability in ibaPDA and ibaDatCoordinator

Back Back to CVE browser

CRITICAL

Deserialization vulnerability in ibaPDA and ibaDatCoordinator

Published Jun 18, 2026

9.3

CRITICAL

CVSS 4.0

EPSS 0.70%

Description

A remote, unauthenticated attacker may exploit a deserialization of untrusted data vulnerability in ibaPDA or ibaDatCoordinator to gain full access to the affected systems.

Affected products

Vendor Iba Product ibaDatCoordinator Default
unaffected
- Version
  1.0.0
  Status
  affected
  Constraints
  <4.0.7
Vendor Iba Product ibaPDA Default
unaffected
- Version
  1.0.0
  Status
  affected
  Constraints
  <8.14.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Iba

ibaDatCoordinator

unaffected

Version	Status	Constraints
1.0.0	affected	<4.0.7

Iba

ibaPDA

unaffected

Version	Status	Constraints
1.0.0	affected	<8.14.0

Remediation

No remediation recorded yet.

Metrics

0.70% 0.00704

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00704

Score over time

Jun–Oct 2026

EPSS v5

Percentile over time

EPSS v5

Table of values (2 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.70% (0.00704)	51.58th	v5 (v2026.06.15)
Jun 19, 2026	0.55% (0.00553)	41.78th	v5 (v2026.06.15)

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (2)

https://certvde.com/en/advisories/VDE-2026-051
third-party-advisory
https://iba.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-051.json
vendor-advisory

Link	Providers	Tags
https://certvde.com/en/advisories/VDE-2026-051		third-party-advisory
https://iba.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-051.json		vendor-advisory