CVE-2025-26398: SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability
SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle (MITM) attack against users. This vulnerability requires additional software not installed by default, local access to the server and administrator level privileges on the host.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-26398?
CVE-2025-26398 has been rated as a critical vulnerability due to its potential for exploitation in machine-in-the-middle attacks.
How do I fix CVE-2025-26398?
To remediate CVE-2025-26398, ensure that you update the SolarWinds Database Performance Analyzer to the latest version that addresses this vulnerability.
What are the potential impacts of CVE-2025-26398?
If exploited, CVE-2025-26398 can lead to unauthorized access and interception of sensitive data through machine-in-the-middle attacks.
What versions of SolarWinds Database Performance Analyzer are affected by CVE-2025-26398?
CVE-2025-26398 affects all versions of SolarWinds Database Performance Analyzer that contain the hard-coded cryptographic key.
Is local access required to exploit CVE-2025-26398?
Yes, local access is required to exploit CVE-2025-26398, making it necessary for an attacker to have physical or authorized access to the system.