CVE-2017-7525

CVE-2017-7525 is a critical deserialization flaw in FasterXML's jackson-databind library (versions prior to 2.6.7.1, 2.7.9.1, and 2.8.9), affecting products from vendors like Debian, NetApp, Oracle, and Red Hat. This vulnerability allows unauthenticated attackers to achieve remote code execution by sending specially crafted input to the ObjectMapper's readValue method. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While it has a high EPSS score, indicating a significant likelihood of exploitation, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or notable community discussion or media coverage.