CVE-2025-66715

A DLL hijacking vulnerability in Axtion ODISSAAS ODIS v1.8.4 allows attackers to execute arbitrary code via a crafted DLL file.

Affected product and version

ODISSAAS ODIS 1.8.4 - <= 1.8.4

Reference: https://www.axtion.nl/odis/

References

https://www.cve.org/CVERecord?id=CVE-2025-66715www.cve.org

Credits

Discovered by Hidde Wijgman, November 2025.