VulnSocial

CVE-2026-28299Disclosure(solarwinds / web_help_desk)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch solarwinds web_help_desk systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.

solarwinds CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • web_help_desk

Threat summary

  • Patch or workaround signal is available
  • 6 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 5 signals
  • Disclosure: 3 classified signals
  • Peaked 3d ago at 2 mentions (2026-06-03); latest day: 1
  • 6 total mentions across 4 days

Affected systems

Vendors
solarwinds
Products
web_help_desk

Deep dive

Activity timeline6 mentions / 4d
01122Mentions · 2026-06-03: 2Mentions · 2026-06-15: 1Mentions · 2026-07-31: 2Mentions · 2026-08-07: 1Patch / Workaround · 2026-07-31: 2Patch / Workaround · 2026-08-07: 1Technical Details · 2026-06-03: 2Technical Details · 2026-07-31: 2Technical Details · 2026-08-07: 106-0306-1507-3108-07
Signal classification2 categories
Disclosure
350.0%
Patch
350.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-06-032
Disclosure2
2026-06-151
Disclosure1
2026-07-312
Patch2
2026-08-071
Patch1
Full discourse6 posts
  • iototsecnews@iototsecnews
    Patch

    SolarWinds の深刻な脆弱性 CVE-2026-28323 が FIX：SAML 認証バイパスの恐れ https://iototsecnews.jp/2026/07/31/critical-solarwinds-web-help-desk-flaw-lets-attackers-bypass-saml-authentication/ SolarWinds Web Help Desk において、シングルサインオン連携処理の不備に起因する深刻な脆弱性 CVE-2026-28323／CVE-2026-28299 が公表されました。この問題は、ログイン時の証明データに対する検証手続きの不足や、メモリ管理の不具合に起因しています。悪用された場合、第三者による不正ログインを許し、サポート窓口内の個人情報や内部情報の閲覧、あるいはサービスの応答停止が引き起こされる恐れがあります。対応策として、修正パッチが同梱された最新版への迅速な更新や、認証設定の点検が有効です。システムを安全に利用するためにも、アクセス制御を見直し、早期にバージョンアップを実施することが推奨されます。 #CVE202628323 #SolarWinds #Vulnerability

    Post summary

    A critical authentication bypass vulnerability (CVE‑2026‑28323) in SolarWinds Web Help Desk allows unauthorized login and potential data exposure or denial of service; an updated patched release is available and immediate update is recommended.

    01000201
    505 followersView on X
  • TECHEPAGES@techepages
    Patch

    SolarWinds patched a high-severity DoS flaw (CVE-2026-28299, CVSS 8.2) in Web Help Desk that lets attackers crash the server via crafted requests that exhaust memory — no RCE, but enough to knock out ticketing/service workflows. The same WHD 2026.2.1 release also fixes a critical SAML auth bypass (CVE-2026-28323, CVSS 9.8) that could allow unauthorized access. The update is more than a patch — it swaps the legacy Tomcat frontend for Caddy, enforces TLS 1.2/1.3 only, adds default security headers, and stops exposing internal services to the network. Orgs running WHD should upgrade to 2026.2.1 ASAP and double-check SAML configs.

    Post summary

    SolarWinds issued the 2026.2.1 patch to fix a high‑severity DoS flaw (CVE‑2026‑28299) and a critical SAML authentication bypass (CVE‑2026‑28323), urging organizations to upgrade immediately.

    0001062
    36 followersView on X
  • The Daily Tech Feed@dailytechonx
    Patch

    SolarWinds has patched a critical SAML authentication bypass vulnerability (CVE-2026-28323) in its Web Help Desk software. Administrators are urged to update to version 2026.2.1 immediately to prevent unauthorized access. This update also addresses other security issues, including a denial-of-service flaw (CVE-2026-28299). #SolarWinds #WebHelpDesk #SAML #CyberSecurity #Vulnerability #SecurityUpdate https://thedailytechfeed.com/critical-flaw-in-solarwinds-web-help-desk-allows-saml-authentication-bypass/

    Post summary

    SolarWinds released a patch (v2026.2.1) fixing a critical SAML authentication bypass (CVE‑2026‑28323) and a denial‑of‑service flaw (CVE‑2026‑28299).

    0000072
    582 followersView on X
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidad en productos Solarwinds ❗ CVE-2026-28299 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-solarwinds-4/ https://t.co/GG6EOQZlbR

    Post summary

    The tweet announces a new vulnerability, CVE-2026-28299, in SolarWinds products and provides a link for more information.

    0000098
    6.7K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-28299 SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insu… https://www.cve.org/CVERecord?id=CVE-2026-28299 ----- Traducción: CVE-2026-28299 Sol… http://infoflow.cloud`

    Post summary

    A denial‑of‑service vulnerability (CVE‑2026‑28299) affecting SolarWinds Web Help Desk has been disclosed, but no PoC, exploit, or patch details are provided.

    0000042
    79 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-28299 SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insu… https://www.cve.org/CVERecord?id=CVE-2026-28299

    Post summary

    The CVE-2026-28299 is a denial‑of‑service flaw affecting SolarWinds Web Help Desk that can crash the server when exploited; no PoC, exploit, patch, or active use is mentioned.

    00000308
    57.6K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appsolarwindsweb_help_desk---

Explore more

Back to dashboardsolarwinds CVEsweb_help_desk vulnerabilities