Overview

SolarWinds Web Help Desk is affected by a critical vulnerability. An attacker can leverage the vulnerability to execute remote code on the affected device.

Description

SolarWinds Web Help Desk is affected by a critical vulnerability tracked as CVE-2025-26399, with a CVSS base score of 9.8. The flaw results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. Successful exploitation of this vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Web Help Desk.

Impact

Successful exploitation of this vulnerability may allow the attacker to take control of the affected system.

Solution

SolarWinds has released a security patch for this vulnerability. Users and administrators are encouraged to apply necessary updates.

References

• 1. https://www.solarwinds.com/trust-center/security-advisories/cve-2025-26399
• 2. https://www.zerodayinitiative.com/advisories/ZDI-25-906/