CVE-2025-63421

HIGH

filosoft Comerc.32 Commercial Invoicing <16.0.0.3 - RCE

Title source: llm
STIX 2.1

Description

An issue in filosoft Comerc.32 Commercial Invoicing v.16.0.0.3 allows a local attacker to execute arbitrary code via the comeinst.exe file

References (2)

Core 2
Core References
Various Sources
https://www.filosoft.pt

Scores

CVSS v3 7.8
EPSS 0.0013
EPSS Percentile 2.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-94
Status published
Published Feb 12, 2026
Tracked Since Feb 18, 2026