CVE-2025-26398

SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle (MITM) attack against users. This vulnerability requires additional software not installed by default, local access to the server and administrator level privileges on the host.

• CWE-798

• https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2025-3_release_notes.htmRelease Notes, Vendor Advisory
• https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26398Patch, Vendor Advisory

Published

Aug 12, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-26392SolarWinds Observability Self-Hosted is susceptible to SQL i…4.6
• CVE-2025-26393SolarWinds Service Desk is affected by a broken access contr…5.4
• CVE-2025-26394SolarWinds Observability Self-Hosted is susceptible to an …4.8
• CVE-2025-26395SolarWinds Observability Self-Hosted was susceptible to a …4.3
• CVE-2025-26396The SolarWinds Dameware Mini Remote Control was determined t…7.8
• CVE-2025-26397SolarWinds Observability Self-Hosted is susceptible to Deser…7.8
• CVE-2025-26399SolarWinds Web Help Desk was found to be susceptible to an u…9.8
• CVE-2025-2640A vulnerability was found in PHPGurukul Doctor Appointment M…9.8
• CVE-2025-26400SolarWinds Web Help Desk was reported to be affected by an X…6.5
• CVE-2025-26401Weak encoding for password vulnerability exists in HMI ViewJ…6.5
• CVE-2025-26402Protection mechanism failure for some Intel(R) NPU Drivers w…6.8
• CVE-2025-26403Out-of-bounds write in the memory subsystem for some Intel(R…7.2