SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

Description

References

• documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-8-7-hotfix-1_release_notes.htm · Release Notes
• solarwinds.com/trust-center/security-advisories/CVE-2025-26399 · Patch
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• microsoft.com/en-us/security/blog/2026/02/06/active-exploitation-solarwinds-web-help-desk · Third Party Advisory
• CISA KEV · CVE-2025-26399

Altre vulnerabilità di web help desk

• CVE-2026-28323CRITICO 9.8SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication me…
• CVE-2026-28299ALTO 7.5SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk s…
• CVE-2025-40554CRITICO 9.8SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker t…
• CVE-2025-40553CRITICO 9.8SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execu…
• CVE-2025-40552CRITICO 9.8SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious ac…