Description
A remote, unauthenticated attacker may exploit a deserialization of untrusted data vulnerability in ibaPDA or ibaDatCoordinator to gain full access to the affected systems.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| iba | ibaPDA | 1.0.0 – < 8.14.0 | 8.14.0 |
| iba | ibaDatCoordinator | 1.0.0 – < 4.0.7 | 4.0.7 |
Advisories 2
- VDE-2026-051 iba: Deserialization vulnerability in ibaPDA and ibaDatCoordinator CERT@VDE · Sep 17, 2026
- WID-SEC-2026-1986 iba AG ibaPDA: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Jun 18, 2026
References
- https://iba.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-051.json vendor-advisory
- https://certvde.com/en/advisories/VDE-2026-051 third-party-advisory