CVE-2025-0994Vulnerability
Trimble Cityworks Deserialization Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Recorded Future · last reported
Last reported 1 month ago
CISA KEVAdded 7 Feb 2025
Fix due 28 Feb 2025
Used by ransomware: not knownCISA KEV catalogue
Fix due 28 Feb 2025
Used by ransomware: not knownCISA KEV catalogue
EPSS31.1%
higher than 98% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 98% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
Recorded Future Announces Automated Signature Creation, Accelerating Vulnerability Prioritization“For example, in February 2025 we reported on the Trimble Cityworks: CVE-2025-0994, showcasing how manual signature creation worked.”
Thanks — we review every report.