Description
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolarWinds | Web Help Desk | 12.8.8 HF1 and below | — |
Advisories 2
- WID-SEC-2026-0247 SolarWinds Web Help Desk: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 25, 2026
- NCSC-2026-0042 Kwetsbaarheden verholpen in SolarWinds Web Help Desk NCSC-NL (Netherlands) · Feb 2, 2026