Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-8024 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

A remote, unauthenticated attacker may exploit a deserialization of untrusted data vulnerability in ibaPDA or ibaDatCoordinator to gain full access to the affected systems.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:8.1 HIGHVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://certvde.com/en/advisories/VDE-2026-051	[email protected]	AdvisoryRemedy
https://iba.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-051.json	[email protected]	AdvisoryBundleRemedyVendor

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-502	Deserialization of Untrusted Data	[email protected]

Affected Products

Product	Versions
iba AG ibaDatCoordinator	>= 1.0.0, < 4.0.7 (semver)
CPE No CPEs found in CPE dictionary for this product. Remediation Upgrade: 4.0.7moderate effort Mitigation:low effort Restrict connections to localhost - Go to Advanced Windows Firewall settings and delete or deactivate all incoming rules for the ibaDatCoordinator Client and Server. - Create manual firewall rules for the connection you use for ibaDatCoordinator and verify that you have the correct ports configured. Help regarding which ports the ibaDatCoordinator Service uses can be found in the iba Help Center. Important: After the change, verify that all ibaDatCoordinator services are working as expected and that the data acquisition is functioning correctly.
iba AG ibaPDA	>= 1.0.0, < 8.14.0 (semver)
CPE No CPEs found in CPE dictionary for this product. Remediation Upgrade: 8.14.0moderate effort Mitigation:low effort Restrict connections to localhost - Go to I/O Manager > General and deactivate the option "Automatically open necessary ports in Windows Firewall." (If this option remains active, after a restart of ibaPDA or a restart for data acquisition, the firewall will be reconfigured automatically.) - Then go to Advanced Windows Firewall settings and delete or deactivate all incoming rules for the ibaPDA Client and Server. - Create manual firewall rules for the connection you use for ibaPDA and verify that you have the correct ports configured. Help regarding which ports the ibaPDA Service uses can be found in the iba Help Center. Important: After the change, verify that all ibaPDA services are working as expected and that the data acquisition is functioning correctly.

Change History

2 change records found show changes

Date	Action	Recorded By
Jun 18, 2026	New CVE Received	[email protected]
Jun 18, 2026	CVE Modified	CISA-ADP