Skip to content
OpenAdvisories
Critical · 10.0 CVE-2025-10363 EUVD-2025-32161GHSA-whm7-g778-6q8v

Unauthenticated RCE via .NET Deserialization in Topal Finance Software

Published Oct 6, 2025 · Updated Oct 6, 2025 · Assigned by NCSC.ch

Description

Deserialization of Untrusted Data vulnerability in Topal Solutions AG Topal Finanzbuchhaltung on Windows allows Remote Code Execution.This issue affects at least Topal Finanzbuchhaltung: 10.1.5.20 and is fixed in version 11.2.12.00

Affected products

VendorProductAffectedFixed
Topal Solutions Topal Finanzbuchhaltung 10.1.5.20 11.2.12.00

References