CVE-2025-61937: Aveva Process Optimization

Critical severity, CVSS 10.0. EPSS: 1.5% chance of exploitation in the next 30 days.

The vulnerability, if exploited, could allow an unauthenticated miscreant to achieve remote code execution under OS system privileges of “taoimr” service, potentially resulting in complete compromise of the  model application server.

Affected products

• Aveva Process Optimization: before 2025 (fixed in 2025)

Published 2026-01-16. Last modified 2026-06-17.