CVE-2025-26397

Katalog CVE

CVSS 7.8 · High EPSS 0,30%

Kerentanan Deserialization of Untrusted Data pada solarwinds observability self-hosted. Skor CVSS 3.1 7.8 (High) menurut solarwinds.com.

Deskripsi (NVD)

SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vulnerability requires authentication from a low-level account and local access to the host server.

Rincian

Terbit di NVD

24 Juli 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber solarwinds.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 20,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26397 patch · advisory vendor
• https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform... release notes