References https://nvd.nist.gov/vuln/detail/CVE-2025-5086 https://www.3ds.com/trust-center/security/security-advisories/cve-2025-5086 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-5086 https://isc.sans.edu/diary/Exploit+Attempts+for+Dassault+DELMIA+Apriso+CVE20255086/32256 https://thehackernews.com/2025/09/critical-cve-2025-5086-in-delmia-apriso.html https://www.cve.org/CVERecord?id=CVE-2025-5086 https://fieldeffect.com/blog/cisa-warns-exploited-flaw-delmia-apriso-manufacturing-software https://www.knowsafe.com/ti/info/0/996990 https://blog.csdn.net/smellycat000/article/details/151768883 https://runzero.com/blog/dassault-systemes-delmia-apriso/
Related Vulnerabilities(CVE-2025-6204) DELMIA Apriso 2020至2025版本代码注入漏洞(CVE-2025-6205)DELMIA Apriso授权缺失漏洞允许特权访问PoCCVE-2024-3300: Delmia Apriso - Pre-Authentication Unsafe .NET Object DeserializationPoCCVE-2025-5086: Dassault Systèmes DELMIA Apriso (up to 2025) - Insecure DeserializationPoCCVE-2025-6204: DELMIA Apriso - Command InjectionPoCCVE-2025-6205: DELMIA Apriso - Broken Access Control(CVE-2025-5086)DELMIA Apriso未验证的反序列化漏洞导致远程代码执行Dassault Systèmes DELMIA Apriso 日志信息泄露漏洞