CVE-2025-26398CWE-798

SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability

Medium · published August 12, 2025

CVSS v3.1
5.6
EPSS
0%
Percentile
8.1
In the wild
Unconfirmed
What it is

SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle (MITM) attack against users. This vulnerability requires additional software not installed by default, local access to the server and administrator level privileges on the host.

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00189 · 8.1th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-08-12T08:10Z
EPSS history
Timeline
  • 12 AUG 08:10Z
    SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability
    cvelistv5