CVE-2025-58662

HIGH

Deserialization of Untrusted Data vulnerability in awesomesupport Awesome Support awesome-support allows Object Injection.This issue affects Awesome Support: from n/a through <= 6.3.5.

Affects 0 products across 2 vendors.

CVSS 3.17.2
EPSS0.5%
Percentile39th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, high privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-502: Deserialization of Untrusted Data

Software deserializes untrusted data without validation, allowing crafted objects to execute arbitrary code.

Related Attack Patterns (CAPEC)
CAPEC-586 Object Injection
via CWE-502

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A deserialization of untrusted data vulnerability exists in Awesome Support plugin versions up to 6.3.5, allowing for object injection attacks.

BSID: BS-2025-GLOBAL-306805-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-58662?
A deserialization of untrusted data vulnerability exists in Awesome Support plugin versions up to 6.3.5, allowing for object injection attacks.
What is the CVSS score for CVE-2025-58662?
CVE-2025-58662 has CVSS 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.5%.
Is CVE-2025-58662 actively exploited?
No confirmed active exploitation of CVE-2025-58662 as of 2026-10-12.
How do I remediate CVE-2025-58662?
Priority: HIGH.
What systems are affected by CVE-2025-58662?
CVE-2025-58662 affects Awesome; Awesomesupport.
Vulnerability Details
CVE IDCVE-2025-58662
BSIDBS-2025-GLOBAL-306805-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Published2025-09-22
Last Modified2026-10-11
ICS Relevance15%
Weakness (CWE)
Deserialization of Untrusted Data
SourceNVD
Official Description

Deserialization of Untrusted Data vulnerability in awesomesupport Awesome Support awesome-support allows Object Injection.This issue affects Awesome Support: from n/a through <= 6.3.5.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can exploit this vulnerability by injecting malicious serialized objects into the application, potentially leading to remote code execution or unauthorized access.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Awesome — —
Awesomesupport — —
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 388 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashda714be8da6eac388e2ad8ea8154c9e2ee58ee8ee852a3fc1032d571ea2110743b1a06a62b08332ed27b7a5eede101d5ec8475886687d8b86a791cfbb338cba0
Related CVEs affecting Awesome
CVE-2025-30528 9.3 Cross-Site Request Forgery (CSRF) vulnerability in wpshopee Awesome Logos awe... CVE-2024-13232 8.8 The WordPress Awesome Import & Export Plugin - Import & Export WordPress Data... CVE-2024-13567 7.5 The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPres... CVE-2025-31899 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scri... CVE-2025-53312 7.1 Cross-Site Request Forgery (CSRF) vulnerability in Looks Awesome OnionBuzz on...
View all Awesome CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →