Feed›Vulnerability›Multiple Vulnerabilities in SolarWinds Web Help Desk Could A...
VulnerabilityCIS Advisories
9.8 — CRITICAL

Multiple Vulnerabilities in SolarWinds Web Help Desk Could Allow for Authentication Bypass

📅 3 August 2026 at 17:05 UTC📰 CIS AdvisoriesView original source ↗

Multiple vulnerabilities have been discovered in SolarWinds Web Help Desk, the most severe of which could allow for authentication bypass. SolarWinds Web Help Desk software grants access to SolarWinds IT support, asset management, and knowledge base operations. A vulnerability in the Web Help Desk could allow an unauthenticated, remote attacker to bypass authentication and gain access. This does require the SAML 2.0 authentication method to be enabled.

🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview

Multiple vulnerabilities in SolarWinds Web Help Desk could allow for authentication bypass, with the most severe vulnerability having a CVSS score of 9.8 (CRITICAL), affecting government and business entities at risk.

⚙️Technical Details
CVEs
CVE-2026-28323CVE-2026-28299Affected Systems: SolarWinds Web Help DeskAttack Vectors: NETWORK
Affected Systems
SolarWinds Web Help Desk
Attack Vectors
NETWORK
💥Impact Assessment
Severity: HIGH
🛡️Recommended Actions
1Apply appropriate updates provided by SolarWinds to vulnerable systems immediately after testing.
2Establish and maintain a documented vulnerability management process for enterprise assets.
3Perform application updates on enterprise assets through automated patch management on a monthly, or more frequent, basis.
📦Affected Products
Solarwinds Web Help Desk
🔐NVD Verified DataVERIFIED
CVE-2026-28323 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287
CVE-2026-28299 ↗CVSS 7.5 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-770
Affected Products (CPE)
Solarwinds Web Help Desk

Read the full article

This is a curated summary. The complete article is available at CIS Advisories.

Read on CIS Advisories ↗
← Back to feed