In a letter sent to its customers and partners, Trimble said it observed cybercriminals abusing a deserialization vulnerability in its Cityworks product to engage in Remote Code Execution (RCE ...

Trimble Cityworks is affected by a zero-day vulnerability that has been exploited in attacks involving the delivery of ...

Hackers are exploiting a vulnerability in Trimble Cityworks, a widely-used asset management system by local and federal government agencies to manage public infrastructure, according to a recent ...

Hackers are exploiting a high-severity remote code execution (RCE) flaw in Cityworks deployments — a GIS-centric asset and work order management software — to execute codes on a customers ...

The CVE-2025-0994 flaw impacts Cityworks versions prior to 15.8.9 and Cityworks with office companion versions before 23.10. The latest versions, 15.8.9 and 23.10, were made available on January ...