What’s Vulnerable › Products
SolarWinds Web Help Desk vulnerabilities
22 known vulnerabilities, 5 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.
Check whether your SolarWinds Web Help Desk version is affected
Exploited SolarWinds Web Help Desk vulnerabilities
- CVE-2025-26399 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
- CVE-2025-40536 — SolarWinds Web Help Desk Security Control Bypass Vulnerability
- CVE-2025-40551 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
- CVE-2024-28987 — SolarWinds Web Help Desk Hardcoded Credential Vulnerability
- CVE-2024-28986 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
Latest SolarWinds Web Help Desk vulnerabilities
- CVE-2026-28323 — SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability (CVSS 9.8)
- CVE-2026-28299 — SolarWinds Web Help Desk Denial-of-Service Vulnerability (CVSS 7.5)
- CVE-2025-40554 — SolarWinds Web Help Desk Authentication Bypass Vulnerability (CVSS 9.8)
- CVE-2025-40553 — SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 9.8)
- CVE-2025-40552 — SolarWinds Web Help Desk Authentication Bypass Vulnerability (CVSS 9.8)
- CVE-2025-40551 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability (CVSS 9.8) — exploited
- CVE-2025-40537 — SolarWinds Web Help Desk Hardcoded Credentials Vulnerability (CVSS 7.5)
- CVE-2025-40536 — SolarWinds Web Help Desk Security Control Bypass Vulnerability (CVSS 9.8) — exploited
- CVE-2025-26399 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability (CVSS 9.8) — exploited
- CVE-2024-28988 — SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability (CVSS 9.8)
- CVE-2025-26400 — SolarWinds Web Help Desk XML External Entity Injection (XXE) Vulnerability (CVSS 6.5)
- CVE-2024-28989 — SolarWinds Web Help Desk Cryptographic Key Management Vulnerability (CVSS 5.5)
- CVE-2024-45709 — SolarWinds Web Help Desk Local File Read Vulnerability (CVSS 5.5)
- CVE-2024-28987 — SolarWinds Web Help Desk Hardcoded Credential Vulnerability (CVSS 9.1) — exploited
- CVE-2024-28986 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability (CVSS 9.8) — exploited
- CVE-2021-35251 — Sensitive Data Disclosure Vulnerability (CVSS 5.3)
- CVE-2021-35243 — HTTP PUT & DELETE Methods Enabled (CVSS 7.5)
- CVE-2021-32076 — Access Restriction bypass vulnerability via referrer spoof - Business Logic Bypass (CVSS 5.3)
- CVE-2019-16961 — (CVSS 5.4)
- CVE-2019-16954 — (CVSS 5.4)
- CVE-2019-16960 — (CVSS 5.4)
- CVE-2019-16956 — (CVSS 5.4)