CVE-2021-45461 2

Vulnerability (CVE)

CISA Adds Actively Exploited Solar Winds Web Help Desk RCE to KEV Catalog

CISA added CVE-2025-40551, a deserialization-of-untrusted-data flaw in SolarWinds Web Help Desk with a CVSS score of 9.8, to its Known Exploited Vulnerabilities catalog on Tuesday, flagging it as actively exploited and exploitable without authentication to...

Vulnerabilities & Patching

Digium Phones Under Attack: Insight Into the Web Shell Implant

Cyber Risks Unit 42 Palo Alto Networks

Unit 42 observed an operation implanting a web shell in the Digium phones FreePBX module on Elastix systems, tied to the Rest Phone Apps remote code execution vulnerability CVE-2021-45461, and recorded more than 500,000 unique malware samples between late...

Vulnerabilities & Patching