New “SOAPwn” .NET Flaws Expose Barracuda, Ivanti, and Microsoft Devices to RCE

Cyberpress • December 11, 2025

Share: View original

Security researchers have disclosed a new class of vulnerabilities , collectively named “SOAPwn,” that affects the .NET Framework and exposes ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SOAPwn Vulnerabilities in .NET Expose Major Devices to RCE Attacks Security researchers have identified a new class of vulnerabilities, termed 'SOAPwn', affecting the .NET Framework. These vulnerabilities can be exploited for remote code execution (RCE) across various enterprise products, including Barracuda, Ivanti, and Microsoft devices. The research highlights risks associated with legacy .NET Framework SOAP client code. 3 sources 51

Extracted Entities

Companies (3)

Barracuda Ivanti Microsoft Devices

Vulnerabilities (1)