news
Offensive Security
November 3rd, 2025 at 4:50 PM

Unauthenticated Remote Code Execution Vulnerability in WSUS Service

CVE-2025-59287 exposes a critical WSUS deserialization flaw enabling unauthenticated remote code execution via unsafe AuthorizationCookie handling. Learn the risks and fixes. The post Unauthenticated Remote Code Execution Vulnerability in WSUS Service appeared first on OffSec .

Get stories like this every Monday

The week's most important AI news in one email. Free, unsubscribe anytime.

Score: 2.05

Engagement proxy: 0

Canonical link: https://www.offsec.com/blog/recent-vulnerabilities-in-wsus-service/