Microsoft Web Deploy Remote Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability has been identified in Web Deploy 4.0. This issue arises from the deserialization of untrusted data, allowing an authorized attacker to execute code over the network by sending a malicious HTTP request to the web server.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected server.

Remediation

Users can apply the official security update available through the Microsoft Update Catalog to address this vulnerability.

Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
5.2
remediation
7.7
relevance
0.4
threat
0.3
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.