exploit/windows/http/wsus_deserialization_rce

weaponized

Windows Server Update Service Deserialization Remote Code Execution

view exploit source metasploittype exploitpublished 2025-10-14catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-59287US	—OT critical	100.0% (100th)	KEV	2025-10-14
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.