AdityaBhatt3010/CVE-2025-59287-When-your-patch-server-becomes-the-attack-vector

PoC

CVE-2025-59287 — Critical unauthenticated RCE in Windows Server Update Services (WSUS) via unsafe deserialization of an AuthorizationCookie, enabling SYSTEM-level compromise and active exploitation; patch or isolate WSUS (ports 8530/8531) immediately.

view exploit source poc_in_githubauthor AdityaBhatt3010published 2025-10-28catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-59287US—OT criticalKEV
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan