Exploitation of Windows Server Update Services Remote Code Execution Vulnerability (CVE-2025-59287)
This rule detects potential exploitation attempts targeting the Windows Server Update Services (WSUS) Remote Code Execution vulnerability, identified as CVE-2025-59287. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected WSUS server.
Splunk (SPL)
