CVE-2025-60889: Stellar-Group Hpx

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Insecure deserialization of untrusted input in StellarGroup HPX 1.11.0 under certain conditions may allow attackers to execute arbitrary code or other unspecified impacts.

Affected products

• Stellar-Group Hpx: up to and including 1.11.0

Published 2026-04-28. Last modified 2026-07-05.