https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T11:46:42.332062+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-66631 CVE-2025-66631 — CSLA .NET is vulnerable to Remote Code Execution via WcfProxy 2026-10-17T11:46:42.333881+00:00

Affected: MarimerLLC csla

CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer (NDCS) and is vulnerable to remote code execution during deserialization. This vulnerability is fixed in version 6.0.0. To workaround this issue, remove the WcfProxy in data portal configurations.