CVE-2025-26396: SolarWinds Dameware Mini Remote Control Service Incorrect Permissions Local Privilege Escalation Vulnerability
Published Jun 2, 2025
·Updated
The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability. This vulnerability requires local access and a valid low privilege account to be susceptible to this vulnerability.
Affected Software
1 affected component
SolarWinds DameWare Mini Remote Control
Remediation
Information
SolarWinds recommends that customers upgrade to SolarWinds Dameware Mini Remote Control 12.3.2 as soon as it becomes available.
Event History
Jun 2, 2025
CVE Published
via MITRE·01:04 PM
Data Sourced
via MITRE·01:04 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-26396?
CVE-2025-26396 is classified as a local privilege escalation vulnerability.
2
What software is affected by CVE-2025-26396?
CVE-2025-26396 affects SolarWinds Dameware Mini Remote Control.
3
How do I fix CVE-2025-26396?
To remediate CVE-2025-26396, apply the latest security patches provided by SolarWinds.
4
Can CVE-2025-26396 be exploited remotely?
CVE-2025-26396 requires local access and a valid low privilege account to be exploited.
5
What can happen if CVE-2025-26396 is exploited?
Exploitation of CVE-2025-26396 could allow an attacker to escalate privileges on the affected system.