CVE-2025-59287

CVSS

—

EPSS

1.000 (100.0th percentile)

CISA KEV

Added 2025-10-24, due 2025-11-14

Exploitation

No report

Public exploits

23 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 85Huntress24 Oct 2025, 04:00

  Exploitation of Windows Server Update Services Remote Code | Huntress

  Huntress has observed threat actors exploiting a Microsoft Windows Server Update Services (WSUS) vulnerability (CVE-2025-59287).

  ↗huntress.com/blog/exploitation-of-windows-serve…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:38poc publishedpoc-in-github
2. 24 Sept, 12:19poc publishedpoc-in-github
3. 24 Sept, 11:56poc publishedpoc-in-github
4. 24 Sept, 11:50kev addedcisa-kev