Hard-Coded Cryptographic Key Vulnerability in SolarWinds Database Performance Analyzer

CVE-2025-26398

What is CVE-2025-26398?

The SolarWinds Database Performance Analyzer contains a hard-coded cryptographic key that poses a security risk. If exploited, an attacker could conduct a machine-in-the-middle (MITM) attack, potentially compromising sensitive user data. Exploitation of this vulnerability requires local access to the server and administrator privileges, along with the installation of additional software not included by default.

References