CVE-2025-26396

7.8 highEPSS 0.2%

High (7.8). EPSS 0.2% chance of exploitation in the next 30 days.

The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability. This vulnerability requires local access and a valid low privilege account to be susceptible to this vulnerability.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2025-06-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_12-3-2_release_notes.htm
https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26396

Check your stack JSON