CVE-2025-0994

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 24, 2026

Last Seen

October 24, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Trimble Cityworks RCE Vulnerability72.0

Trimble Cityworks has a deserialization vulnerability (CVE-2025-0994) allowing authenticated users to execute remote code on affected Microsoft IIS web servers. Versions prior to 15.8.9 and Cityworks with office companion versions before 23.10 are impacted. Trimble has confirmed active exploitation...