Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

The Business 1.6.1: Deserialization of Untrusted Data Can Lead to Remote Code Execution

CVE-2025-31430 · published 1 year ago
Summary

A security issue in The Business version 1.6.1 allows attackers to inject malicious code, potentially taking control of your system. All versions of The Business from 1.0 to 1.6.1 are affected, so it's essential to update to the latest version to stay secure. We recommend upgrading to a patched version as soon as possible.

Original advisory text
Deserialization of Untrusted Data vulnerability in themeton The Business allows Object Injection. This issue affects The Business: from n/a through 1.6.1.
Deserialization of Untrusted Data vulnerability in themeton The Business allows Object Injection. This issue affects The Business: from n/a through 1.6.1.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-502Deserialization of Untrusted Data
Timeline
Published23 May 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-31430 · NVD
Track software like this
Free during beta