SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability (CVE-2025-26398)
Summary
SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle (MiTM) attack against users. This vulnerability requires additional software not installed by default, local access to the server and administrator level privileges on the host.
Affected Products
SolarWinds Database Performance Analyzer 2025.2 and previous versions
Fixed Software Release
Advisory Detail
Severity
Medium
Advisory ID
First Published
08/12/2025
Fixed Version