CVE-2025-25940

Description

VisiCut 2.1 allows code execution via Insecure XML Deserialization in the loadPlfFile method of VisicutModel.java.

Affected Platforms

Weakness Type

CWE-502

References

• https://github.com/t-oster/VisiCut
• https://royblume.github.io/CVE-2025-25940/
• https://royblume.github.io/CVE-2025-25940/