Login Request a demo
WH
Product
Web Help Desk
by SolarWinds · last CVE Jul 30, 2026
On CISA KEVExploited in the wildRansomware-linked
22
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities22In the news3Timeline
Severity mix
Critical 10High 3Medium 9Low 0
Severity
All severities22Critical10High3Medium9Low0
Exploitation
On CISA KEV5Exploited in the wild5
Watch

Add Web Help Desk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-40551
In wildKEV
9.8
84%
Jan 28
SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
Affected: 12.8.8 HF1 and below
CVE-2025-40536
In wildKEV
9.8
74%
Jan 28
SolarWinds Web Help Desk Security Control Bypass Vulnerability
Affected: 12.8.8 HF1 and below
CVE-2025-26399
RansomwareIn wildKEV
9.8
90%
Sep 23
SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
Affected: 12.8.7 and below
CVE-2024-28986
In wildKEV
9.8
85%
Aug 13
SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
Affected: previous versions through 12.8.3
CVE-2024-28987
In wildKEV
9.1
93%
Aug 21
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
Affected: 12.8.3 Hotfix 1 and previous versions
CVE-2026-28323
9.8
1%
Jul 30
SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability
Affected: 2026.1 and all previous versions
CVE-2025-40554
9.8
61%
Jan 28
SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web…
Affected: before 2026.1
CVE-2025-40553
9.8
68%
Jan 28
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to…
Affected: before 2026.1
CVE-2025-40552
9.8
52%
Jan 28
SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that…
Affected: before 2026.1
CVE-2024-28988
9.8
39%
Sep 1
SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on…
Affected: through 12.8.2; 12.8.3; 12.8.3; 12.8.3
Showing 10