{"id":"CVE-2025-26396","aliases":["EUVD-2025-16661","GHSA-hwrj-qgq6-7mh4"],"status":"published","title":"SolarWinds Dameware Mini Remote Control Service Incorrect Permissions Local Privilege Escalation Vulnerability","description":"The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability. This vulnerability requires local access and a valid low privilege account to be susceptible to this vulnerability.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00235,"percentile":0.14618,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2025-06-02T13:04:19Z","modified":"2026-06-17T09:01:42Z","products":[{"vendor":"solarwinds","product":"dameware mini remote control service"}],"references":[{"url":"https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26396"},{"url":"https://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_12-3-2_release_notes.htm"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26396"},{"url":"https://github.com/advisories/GHSA-hwrj-qgq6-7mh4"}],"sources":{"cve":[{"id":"CVE-2025-26396","title":"SolarWinds Dameware Mini Remote Control Service Incorrect Permissions Local Privilege Escalation Vulnerability","description":"The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability. This vulnerability requires local access and a valid low privilege account to be susceptible to this vulnerability.","status":"published","published":"2025-06-02T13:04:19.648Z","modified":"2026-02-26T18:27:44.824Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:32:28.250136Z"}],"euvd":[{"id":"EUVD-2025-16661","description":"The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability. This vulnerability requires local access and a valid low privilege account to be susceptible to this vulnerability.","status":"published","published":"2025-06-02T13:04:19Z","modified":"2026-02-26T18:27:44Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:48:18.130322Z"}],"ghsa":[{"id":"GHSA-hwrj-qgq6-7mh4","title":"The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect...","description":"The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability. This vulnerability requires local access and a valid low privilege account to be susceptible to this vulnerability.","status":"published","published":"2025-06-02T15:31:22Z","modified":"2025-06-02T15:31:23Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:02:32.017383Z"}],"nvd":[{"id":"CVE-2025-26396","description":"The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability. This vulnerability requires local access and a valid low privilege account to be susceptible to this vulnerability.","status":"published","published":"2025-06-02T13:15:21.367Z","modified":"2026-06-17T09:01:42.077Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:11:10.143444Z"}]}}