CVE-2025-5086 is a critical vulnerability affecting DELMIA Apriso, a Manufacturing Operations Management (MOM) and Manufacturing Execution System (MES) software developed by Dassault Systèmes. DELMIA Apriso is widely used in industrial environments to manage production processes and connect production lines to enterprise systems. The vulnerability affects versions from Release 2020 to Release 2025.

Technical Summary

This is an untrusted data deserialization vulnerability with a CVSS score of 9.0 out of 10.0, classified as critical severity. The vulnerability could potentially allow remote code execution by attackers who successfully exploit the deserialization flaw.

What makes this vulnerability particularly dangerous is the fact that CISA has confirmed active exploitation in real-world environments and has added CVE-2025-5086 to its Known Exploited Vulnerabilities (KEV) catalog. This indicates that malicious actors are already using this vulnerability to compromise systems.

Recommendations

1. Immediate action required: Organizations using DELMIA Apriso must treat this issue as an emergency and prioritize applying patches immediately, due to active exploitation.

2. Patch management: Apply security updates for DELMIA Apriso as soon as they are made available by Dassault Systèmes.

3. Network segmentation: Implement or verify network segmentation to limit the exposure of DELMIA Apriso systems to untrusted networks.

4. Monitoring: Enhance monitoring of DELMIA Apriso systems to identify suspicious activity or unauthorized access attempts.

5. Incident response: Review and activate incident response procedures, as systems may already be compromised given the active exploitation.

6. Risk assessment: Conduct an immediate risk assessment to understand the potential impact on production operations and data integrity.