Skip to content
Threat Feed
Subscribe

Product

Web Deploy (< 10.0.2001)

1 brief RSS
high advisory

Remote Code Execution in Microsoft Web Deploy via CVE-2025-53772

An unauthenticated or low-privilege attacker can achieve remote code execution in Microsoft Web Deploy versions prior to 10.0.2001 by exploiting insecure deserialization of the 'MSDeploy.SyncOptions' HTTP header.

Web Deploy remote-code-execution deserialization cve-2025-53772 iis web-deploy
1r 2t 1c