SolarWinds Web Help Desk vulnerabilities

19 published CVEs name SolarWinds Web Help Desk among the affected products; CISA lists 5 of them as exploited in the wild.

Known exploited

Newest addition to KEV first.

CVE-2025-26399
SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
SolarWinds · Web Help Desk
ExploitedCritical9.8
CVE-2025-40536
SolarWinds Web Help Desk Security Control Bypass Vulnerability
SolarWinds · Web Help Desk
ExploitedHigh8.1
CVE-2025-40551
SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
SolarWinds · Web Help Desk
ExploitedCritical9.8
CVE-2024-28987
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
SolarWinds · Web Help Desk
ExploitedCritical9.1
CVE-2024-28986
SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
SolarWinds · Web Help Desk
ExploitedCritical9.8