Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-26399

SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability is a patch bypass of CVE-2024-28988, which in turn is a patch bypass of CVE-2024-28986.

Published

2025-09-23T05:15:35.777

Last Modified

2025-11-14T23:41:16.280

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses

Type: Secondary
CWE-502

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	solarwinds	web_help_desk	≤ 12.8.6	Yes
Application	solarwinds	web_help_desk	12.8.7	Yes

References

https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-8-7-hotfix-1_release_notes.htm Release Notes ([email protected])
https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26399 Patch, Vendor Advisory ([email protected])