Medium severity5.6NVD Advisory· Published Aug 12, 2025· Updated Jun 17, 2026
CVE-2025-26398
CVE-2025-26398
Description
SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle (MITM) attack against users. This vulnerability requires additional software not installed by default, local access to the server and administrator level privileges on the host.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:solarwinds:database_performance_analyzer:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:solarwinds:database_performance_analyzer:*:*:*:*:*:*:*:*range: <2025.3
- (no CPE)
- (no CPE)range: 2025.2 and below
Patches
Vulnerability mechanics
References
2- www.solarwinds.com/trust-center/security-advisories/CVE-2025-26398nvdPatchVendor Advisory
- documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2025-3_release_notes.htmnvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.