CVE-2025-26393 in Service Desk

Riassunto

di MITRE • 17/03/2025

SolarWinds Service Desk is affected by a broken access control vulnerability. The issue allows authenticated users to escalate privileges, leading to unauthorized data manipulation.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: SolarWinds
• Prenotare: 08/02/2025
• Divulgazione: 17/03/2025
• Moderazione: accettato
• Voce: VDB-299983
• CPE: pronto
• CWE: CWE-653 (confermato)
• CVSS: 5.4 (CNA)
• EPSS: 0.00298
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-26393
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-26393
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-26393/