CVE-2025-0994

Vendor

Microsoft, Trimble

Product

IIS, Cityworks / Trimble software

EPSS

0.31 (p98)

Exposure class

Web platform, OT / ICS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 57
   Threat signal FortiGuard 8d ago

   Trimble Cityworks Remote Code Execution Attack

   What is the Attack? Trimble Cityworks contains a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer's Microsoft Internet Information Services (IIS)…

   Exploited EPSS 0.31 Fix available CVE-2025-0994 Microsoft Trimble
2. 16
   Research Insikt Group 4 Sep 2026

   Recorded Future Announces Automated Signature Creation, Accelerating Vulnerability Prioritization

   Recorded Future's Automated Signature Creation turns new vulnerabilities into detection signatures in under an hour, matching the pace of AI-driven exploits.

   EPSS 0.31 CVE-2025-0994