PoC Index 85,079 CVEs with PoCs

CVE-2025-59287

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

KEVCRITICAL 9.8EPSS 100.0%

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

Affected: Microsoft · Windows Server 2012 · Windows Server 2012 (Server Core installation) · Windows Server 2012 R2 · Windows Server 2012 R2 (Server Core installation) · Windows Server 2016 · Windows Server 2016 (Server Core installation)
CVSS v3.1 MICROSOFT: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 99.98% chance of exploitation in the next 30 days, 100th percentile
CISA KEV: added 2025-10-24
Nuclei: critical · CWE-502
Published: 2025-10-14
Updated: 2026-02-26

Proof-of-concept exploits (19)

trustedsec/spoonmap214★ · 2026-10-15
0x7556/CVE-2025-592877★ · 2025-10-30
0xBruno/WSUSploit.NET1★ · 2025-10-31
Adel-hx0d/cve-2025-592871★ · 2025-11-21
DaddyBigFish/CVE-2025-59287-hawktrace0★ · 2025-10-25
FurkanKAYAPINAR/CVE-2025-592870★ · 2025-10-28
LuemmelSec/CVE-2025-59287---WSUS-SCCM-RCE2★ · 2026-01-16
Lupovis/Honeypot-for-CVE-2025-59287-WSUS26★ · 2025-10-27
M507/CVE-2025-59287-PoC15★ · 2025-12-10
MaxymGorn/cve-2025-59287-exploit-poc0★ · 2025-11-03
QurtiDev/WSUS-CVE-2025-59287-RCE11★ · 2025-11-03
garvitv14/CVE-2025-5928716★ · 2025-10-25
jiansiting/CVE-2025-59287174★ · 2025-10-28
mubix/Find-WSUS46★ · 2025-10-28
ross-ns/WSUS-CVE-2025-592870★ · 2026-02-18
swoon69/CVE-2025-59287-Exercise-Use0★ · 2026-03-09
tecxx/CVE-2025-59287-WSUS18★ · 2025-10-27
kennedy-aikohi/WSUS-Exploitation-and-Velociraptor-Assisted-LockBit-Ransomware-Attempt0★ · 2026-01-09
tijldeneut/Security157★ · 2026-09-28

Nuclei templates (1)

projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59287.yaml

Metasploit modules (1)

rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/wsus_deserializatio…

Security advisories

References

Related