Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
SolarWinds

SolarWinds Web Help Desk vulnerabilities

19 published CVEs name SolarWinds Web Help Desk among the affected products; CISA lists 5 of them as exploited in the wild.

Published CVEs
19
Last 12 months
8
Critical
9
Known exploited
5

Critical 9High 3Medium 7Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20213
  2. 20221
  3. 20243
  4. 20254
  5. 20268

Known exploitedNewest addition to KEV first

  • CVE-2025-26399

    SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability

    SolarWinds · Web Help Desk

    ExploitedCritical9.8
  • CVE-2025-40536

    SolarWinds Web Help Desk Security Control Bypass Vulnerability

    SolarWinds · Web Help Desk

    ExploitedHigh8.1
  • CVE-2025-40551

    SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability

    SolarWinds · Web Help Desk

    ExploitedCritical9.8
  • CVE-2024-28987

    SolarWinds Web Help Desk Hardcoded Credential Vulnerability

    SolarWinds · Web Help Desk

    ExploitedCritical9.1
  • CVE-2024-28986

    SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

    SolarWinds · Web Help Desk

    ExploitedCritical9.8

Newest CVEs

  • CVE-2026-28323

    SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability

    SolarWinds · Web Help Desk

    Critical9.8
  • CVE-2026-28299

    SolarWinds Web Help Desk Denial-of-Service Vulnerability

    SolarWinds · Web Help Desk

    High8.2
  • CVE-2025-40554

    SolarWinds Web Help Desk Authentication Bypass Vulnerability

    SolarWinds · Web Help Desk

    Critical9.8
  • CVE-2025-40553

    SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability

    SolarWinds · Web Help Desk

    Critical9.8
  • CVE-2025-40552

    SolarWinds Web Help Desk Authentication Bypass Vulnerability

    SolarWinds · Web Help Desk

    Critical9.8
  • CVE-2025-40551

    SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability

    SolarWinds · Web Help Desk

    ExploitedCritical9.8
  • CVE-2025-40537

    SolarWinds Web Help Desk Hardcoded Credentials Vulnerability

    SolarWinds · Web Help Desk

    High7.5
  • CVE-2025-40536

    SolarWinds Web Help Desk Security Control Bypass Vulnerability

    SolarWinds · Web Help Desk

    ExploitedHigh8.1
  • CVE-2025-26399

    SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability

    SolarWinds · Web Help Desk

    ExploitedCritical9.8
  • CVE-2024-28988

    SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

    SolarWinds · Web Help Desk

    Critical9.8