M507/CVE-2025-59287-PoC

PoC

Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 & CVE-2023-35317

view exploit source poc_in_githubauthor M507published 2025-11-16catalog poc_in_github

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-59287US	—OT critical	100.0% (100th)	KEV	2025-10-14
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
CVE-2023-35317US	—	1.38% (72nd)	Exploit	2023-07-11
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.