VulnSocial

CVE-2025-61622General(apache / fory)

MEDIUMCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch apache fory systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sources. An attacker can craft a data stream that selects pickle-fallback serializer during deserialization, leading to the execution of `pickle.loads`, which is vulnerable to remote code execution. Users are recommended to upgrade to pyfory version 0.12.3 or later, which has removed pickle fallback serializer and thus fixes this issue.

apache CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-502

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • fory

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 6 mentions across 6 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 3 signals
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 4 signals
  • General: 2 classified signals
  • Peaked 5d ago at 1 mentions (2026-05-14); latest day: 1
  • 6 total mentions across 6 days

Affected systems

Vendors
apache
Products
fory

Deep dive

Activity timeline6 mentions / 6d
00111Mentions · 2026-05-14: 1Mentions · 2026-05-28: 1Mentions · 2026-05-29: 1Mentions · 2026-05-30: 1Mentions · 2026-05-31: 1Mentions · 2026-08-27: 1PoC Mentioned / Linked · 2026-05-28: 1PoC Mentioned / Linked · 2026-05-30: 1PoC Mentioned / Linked · 2026-05-31: 1Exploit Tool / Code · 2026-05-31: 1Patch / Workaround · 2026-05-29: 1Technical Details · 2026-05-28: 1Technical Details · 2026-05-29: 1Technical Details · 2026-05-30: 1Technical Details · 2026-05-31: 105-1405-2805-2905-3005-3108-27
Signal classification5 categories
General
233.3%
PoC
116.7%
Patch
116.7%
Disclosure
116.7%
Exploit
116.7%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-05-141
General1
2026-05-281
PoC1
2026-05-291
Patch1
2026-05-301
Disclosure1
2026-05-311
Exploit1
2026-08-271
General1
Full discourse6 posts
  • BugBunny.ai - Continuous AI Pentesting System@BugBunny_ai
    General

    66 CVE-2025-58434 CVE-2025-59057 CVE-2025-59790 CVE-2025-59792 CVE-2025-61622 CVE-2025-61686 CVE-2025-64756 CVE-2026-21884 CVE-2026-22807 CVE-2026-23630 CVE-2026-27471 CVE-2026-27806 CVE-2026-27955 CVE-2026-28215 CVE-2026-28217 CVE-2026-28351 CVE-2026-28361 CVE-2026-28384 CVE-2026-28396 CVE-2026-28398 CVE-2026-28444 CVE-2026-28445 CVE-2026-29093 CVE-2026-30973 CVE-2026-31888 CVE-2026-33016 CVE-2026-33037 CVE-2026-33038 CVE-2026-33039 CVE-2026-3351 CVE-2026-34037 CVE-2026-34158 CVE-2026-34167 CVE-2026-34170 CVE-2026-34171 CVE-2026-34198 CVE-2026-34532 CVE-2026-34573 CVE-2026-34574 CVE-2026-34595 CVE-2026-34746 CVE-2026-34748 CVE-2026-34749 CVE-2026-34750 CVE-2026-34972 CVE-2026-35214 CVE-2026-35412 CVE-2026-35413 CVE-2026-35441 CVE-2026-40165 CVE-2026-40293 CVE-2026-40302 CVE-2026-40304 CVE-2026-40454 CVE-2026-40914 CVE-2026-41131 CVE-2026-41590 CVE-2026-42883 CVE-2026-42884 CVE-2026-42885 CVE-2026-42886 CVE-2026-43888 CVE-2026-43889 CVE-2026-43998 CVE-2026-43999 CVE-2026-4800

    Post summary

    The text simply enumerates CVE identifiers without any additional context, evidence of exploitation, patches, or technical details.

    2176862729382.1K
    3.1K followersView on X
  • BugBunny.ai - Continuous AI Pentesting System@BugBunny_ai
    General

    108 CVE-2025-58434 CVE-2025-59057 CVE-2025-59343 CVE-2025-59790 CVE-2025-59792 CVE-2025-61622 CVE-2025-61686 CVE-2025-62228 CVE-2025-62232 CVE-2025-64756 CVE-2026-21884 CVE-2026-22706 CVE-2026-22807 CVE-2026-23630 CVE-2026-24015 CVE-2026-24899 CVE-2026-27471 CVE-2026-27806 CVE-2026-27955 CVE-2026-28215 CVE-2026-28217 CVE-2026-28351 CVE-2026-28361 CVE-2026-28384 CVE-2026-28396 CVE-2026-28398 CVE-2026-28444 CVE-2026-28445 CVE-2026-29093 CVE-2026-30973 CVE-2026-31888 CVE-2026-33016 CVE-2026-33037 CVE-2026-33038 CVE-2026-33039 CVE-2026-33264 CVE-2026-33413 CVE-2026-3351 CVE-2026-34037 CVE-2026-34158 CVE-2026-34167 CVE-2026-34170 CVE-2026-34171 CVE-2026-34198 CVE-2026-34532 CVE-2026-34573 CVE-2026-34574 CVE-2026-34595 CVE-2026-34746 CVE-2026-34748 CVE-2026-34749 CVE-2026-34750 CVE-2026-34972 CVE-2026-35214 CVE-2026-35412 CVE-2026-35413 CVE-2026-35441 CVE-2026-40006 CVE-2026-40007 CVE-2026-40009 CVE-2026-40165 CVE-2026-40293 CVE-2026-40302 CVE-2026-40304 CVE-2026-40452 CVE-2026-40454 CVE-2026-40914 CVE-2026-41131 CVE-2026-41590 CVE-2026-42275 CVE-2026-42883 CVE-2026-42884 CVE-2026-42885 CVE-2026-42886 CVE-2026-43888 CVE-2026-43889 CVE-2026-43998 CVE-2026-43999 CVE-2026-44247 CVE-2026-44309 CVE-2026-44310 CVE-2026-44442 CVE-2026-44446 CVE-2026-44705 CVE-2026-44947 CVE-2026-45022 CVE-2026-45090 CVE-2026-45720 CVE-2026-45723 CVE-2026-45726 CVE-2026-46553 CVE-2026-46554 CVE-2026-47733 CVE-2026-4800 CVE-2026-48978 CVE-2026-49478 CVE-2026-50285 CVE-2026-52808 CVE-2026-52809 CVE-2026-53926 CVE-2026-53928 CVE-2026-53929 CVE-2026-53930 CVE-2026-56842 CVE-2026-60076 CVE-2026-60077 CVE-2026-75605 CVE-2026-9103

    Post summary

    The post simply enumerates a long list of CVE identifiers without providing additional details, evidence of exploitation, or mitigation information.

    30124138.4K
    4.0K followersView on X
  • ɐpnH@0x0Huda
    Disclosure

    CVE-2025-61622: PyFory – Insecure Pickle Deserialization to Remote Code Execution https://blog.securelayer7.net/cve-2025-61622-pyfory-deserialization-rce-exploit/

    Post summary

    A new CVE-2025-61622 affecting PyFory was disclosed, highlighting insecure pickle deserialization that enables remote code execution, with a blog post providing additional details.

    06094446
    725 followersView on X
  • Nicolas Krassas@Dinosn
    PoC

    CVE-2025-61622: PyFory – Insecure Pickle Deserialization to Remote Code Execution https://blog.securelayer7.net/cve-2025-61622-pyfory-deserialization-rce-exploit/

    Post summary

    The post references a blog that details an insecure pickle deserialization flaw in PyFory, providing a proof‑of‑concept for remote code execution and outlining the technical aspects of the vulnerability.

    1401221.4K
    158.6K followersView on X
  • VulnTracker@vuln_tracker
    Patch

    Pickle deserialization. Again. CVE-2025-61622. PyFory - a Python serialization library - insecurely deserializes Pickle data straight to RCE. Every Python dev knows Pickle is dangerous. Somehow it keeps shipping in production anyway. If PyFory is in your stack, patch it. http://vulntracker.io

    Post summary

    CVE‑2025‑61622 exposes PyFory to insecure Pickle deserialization that can lead to remote code execution, and the mitigation is to patch the library.

    0100094
    655 followersView on X
  • ✪ 𝕱𝖆𝖍𝖆𝖉@fad_777
    Exploit

    تحذير من ثغرة أمنية خطيرة في PyFory: CVE-2025-61622. يتعلق الأمر بإلغاء تسلسل Pickle غير آمن يمكن أن يؤدي إلى تنفيذ الكود عن بُعد. A serious security vulnerability, CVE-2025-61622, has been identified in PyFory. It's about insecure Pickle deserialization that could lead to remote code execution. https://blog.securelayer7.net/cve-2025-61622-pyfory-deserialization-rce-exploit/ #PyFory #SecurityVulnerability #RemoteCodeExecution

    Post summary

    CVE‑2025‑61622 in PyFory allows remote code execution via insecure Pickle deserialization; a linked exploit is referenced, but no evidence of active attacks or patch is provided.

    0000040
    68 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appapachefory---

Explore more

Back to dashboardapache CVEsfory vulnerabilities