Aviatrix Threat Research Center@aviatrixtrc
Active Exploitation
TRC analysis shows attackers exploiting CVE-2024-28323 can forge SAML responses to gain administrative access to SolarWinds Help Desk without any credentials. Once inside, they escalate privileges and move laterally through internal systems to access sensitive corporate data. Runtime segmentation helps contain post-compromise activity when identity controls fail. #ZeroTrust 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/solarwinds-web-help-desk-cve-2026-28323-saml-bypass
Post summary
The post reports that CVE-2024-28323 is being actively exploited to forge SAML responses and obtain administrative access to SolarWinds Help Desk, though no patch information or PoC is provided.
0000029
2.0K followersView on X