Critical iba Deserialization Vulnerability Exposes ibaPDA and ibaDatCoordinator to RCE (CVE-2026-8024)

A critical unauthenticated deserialization vulnerability (CVE-2026-8024, CVSSv4 9.3) in ibaPDA and ibaDatCoordinator allows remote attackers to achieve arbitrary code execution and potential privilege escalation by exploiting unsafe use of the .NET BinaryFormatter; CERT@VDE published an advisory and iba released patches (ibaPDA v8.14.0, ibaDatCoordinator v4.0.7), so administrators should apply updates immediately or restrict network exposure as a temporary mitigation.