# CVE-2025-5086: Dassault Systèmes DELMIA Apriso deserialization remote code execution

Source: https://junglewise.ai/threats/cve-2025-5086-dassault-systemes-delmia-apriso-deserialization-remote-code  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-09-11. Updated: 2026-05-15  
License: CC BY 4.0 with a link back

CVE-2025-5086 · Severity: critical · CVSS 9 · Exploited in the wild · Published 2025-09-11

Dassault Systèmes DELMIA Apriso, a manufacturing operations management platform used to manage global production and supply chains, contains a critical security flaw. An attacker can exploit this vulnerability to take full control of the server remotely without needing any login credentials. This could lead to significant operational disruptions, theft of sensitive manufacturing data, or a complete shutdown of production facilities.

Technologies: [Dassault SystèMes DELMIA Apriso](https://junglewise.ai/threats/technologies/delmia-apriso). Vendors: [Dassault SystèMes](https://junglewise.ai/threats/vendors/dassault-syst-mes).

## Quick answers

**Is CVE-2025-5086 exploited in the wild?** Yes. CVE-2025-5086 is known to be exploited in the wild, first recorded on 11 September 2025. Treat it as urgent.

**How severe is CVE-2025-5086?** Critical severity, with a CVSS score of 9, published 11 September 2025.

**Which products and versions are affected?** Dassault Systèmes DELMIA Apriso Release 2020 through Release 2025.

**Is there a fix for CVE-2025-5086?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-5086 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2025-5086?** Check whether you run Dassault SystèMes DELMIA Apriso. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A deserialization of untrusted data vulnerability (CWE-502) exists in Dassault Systèmes DELMIA Apriso from Release 2020 through Release 2025. The flaw allows an unauthenticated remote attacker to execute arbitrary code on the host system by sending specially crafted serialized objects over the network. While the attack complexity is rated as high, the vulnerability has been observed being exploited in the wild. Successful exploitation results in a complete compromise of confidentiality, integrity, and availability, with the impact extending beyond the immediate component (Scope: Changed). Users are advised to apply vendor-provided mitigations or patches immediately.

## Affected products

- Dassault Systèmes DELMIA Apriso Release 2020 through Release 2025

## Timeline

- 2025-06-02: disclosed: Initial disclosure by Dassault Systèmes
- 2025-09-11: kev added: Added to CISA Known Exploited Vulnerabilities catalog
- 2025-09-11: exploited: Confirmed active exploitation in the wild

## Related threats

- [Dassault Systèmes DELMIA Apriso code injection](https://junglewise.ai/threats/cve-2025-6204-dassault-systemes-delmia-apriso-code-injection)
- [Dassault Systèmes DELMIA Apriso missing authorization](https://junglewise.ai/threats/cve-2025-6205-dassault-systemes-delmia-apriso-missing-authorization)