CVE-2026-28299

HighCVSS 8.2

Published: 02/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

SolarWinds Web Help Desk is affected by a denial-of-service vulnerability that can cause the server to crash due to insufficient memory.

Risk Assessment

An attacker can remotely crash the help desk server, leading to service disruption.

Recommendation

Apply the patch from SolarWinds or restrict access to Web Help Desk if possible.

Other vulnerabilities in SolarWinds Web Help Desk

CVE-2026-28323Critical
SolarWinds Web Help Desk is affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.

Original NVD description (English source)

SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.