CVE-2025-26398 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-mi…
Medium CVSS: 5.6

CVE-2025-26398

SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle (MITM) attack against users. This vulnerability requires additional software not installed by default, local access to the server and administrator level privileges on the host.
Vendor
Solarwinds
Product
Database Performance Analyzer
CWE
CWE-798
Yayın Tarihi
2025-08-12 08:15:26
Güncelleme
2025-11-17 16:10:05
Source Identifier
psirt@solarwinds.com
KEV Date Added
-

Kategoriler

CWE-798 Database Performance Analyzer MEDIUM Solarwinds 2025

Referanslar

https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2025-3_release_notes.htm https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26398