CERT-EU 2025-10-24

2025-040: Critical Vulnerability in Windows Server Update Service (WSUS)

Machine-generated analysis · WAYSCloud LLM

A proof-of-concept exploit is publicly available for this WSUS vulnerability. The update was released out-of-band by Microsoft.

Context

Windows Server Update Service (WSUS) is a Microsoft product for managing updates within a network. The advisory states a remote unauthenticated attacker could execute code on affected systems. This vulnerability required an out-of-band update from Microsoft, which may indicate urgency.

Operator considerations

Patch: Apply the out-of-band update for WSUS immediately.
Check: Verify all WSUS servers are running the updated version.
Isolate: Ensure WSUS servers are not directly exposed to the internet.

From Computer Emergency Response Team for the EU institutions ↗

On October 23, 2025, Microsoft released an out-of-band update to address a critical vulnerability in Windows Server Update Service (WSUS). This vulnerability could allow a remote unauthenticated attacker to execute code on the targeted systems. A proof-of-concept is publicly available for this vulnerability.

It is recommended to update as soon as possible.

Read the full advisory on CERT-EU →