
The discovery of a critical security vulnerability in the Bitdefender GravityZone Console has sent shockwaves through the cybersecurity community. Identified as CVE-2025-2244, this flaw’s high CVSS score of 9.5 underscores its significant risks. The vulnerability stems from an insecure PHP deserialization issue within the sendMailFromRemoteSource method of the Emails.php file. Here, the application uses the unserialize() function on user-controlled input