What is CVE-2025-10363?

CVE-2025-10363 is a vulnerability in Topal Solutions Ag Finanzbuchhaltung, classified under Deserialization of Untrusted Data. Published 2025-10-06.

Is CVE-2025-10363 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Deserialization in Topal Solutions Ag Finanzbuchhaltung

CVE-2025-10363

Deserialization of Untrusted Data vulnerability in Topal Solutions AG Topal Finanzbuchhaltung on Windows allows Remote Code Execution.This issue affects at least Topal Finanzbuchhaltung: 10.1.5.20 and is fixed in version 11.2.12.00

Vulnerability class: Insecure Deserialization

EPSS: 0.005 (41.8th percentile) — read the EPSS interpretation.

Affected products

Topal Solutions Ag Finanzbuchhaltung — versions 10.1.5.20, 11.2.12.00

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

vulnerability@ncsc.ch
vulnerability@ncsc.ch (release-notes)

Frequently asked questions

What is CVE-2025-10363?: CVE-2025-10363 is a vulnerability in Topal Solutions Ag Finanzbuchhaltung, classified under Deserialization of Untrusted Data. Published 2025-10-06.
Is CVE-2025-10363 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.