Windows Server Update Service (WSUS) Remote Code Execution Vulnerability (CVE-2025-59287) Notice

Overview Recently, NSFOCUS CERT detected that Microsoft released a security update that fixed the Windows Server Update Service (WSUS) remote code execution vulnerability (CVE-2025-59287); Because WSUS’s GetCookie does not perform type verification when processing objects, an unauthenticated attacker can achieve remote code execution by deserializing malicious data to control the target server. The CVSS score…The post Windows Server Update Service (WSUS) Remote Code Execution Vulnerability (CVE-2025-59287) Notice appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..