CVE-2024-28988 2

Vulnerability (CVE)

Solar Winds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw

SolarWinds released hot fixes for CVE-2025-26399, a CVSS 9.8 unauthenticated AjaxProxy deserialization remote code execution flaw in Web Help Desk 12.8.7 and all previous versions, disclosed in an advisory on September 17, 2025 and credited to an anonymous...

Vulnerabilities & Patching

Solar Winds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth Bypass

Cyber Risks The Hacker News

SolarWinds released WHD 2026.1 to fix four critical Web Help Desk vulnerabilities, including CVE-2025-40551 and CVE-2025-40553, deserialization flaws that let an unauthenticated remote attacker achieve RCE and run arbitrary OS commands. CVE-2025-40552 and...

Vulnerabilities & Patching