CVE-2026-28299
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
SolarWinds Web Help Desk is affected by a denial-of-service vulnerability that can cause the server to crash due to insufficient memory.
Risk Assessment
An attacker can remotely crash the help desk server, leading to service disruption.
Recommendation
Apply the patch from SolarWinds or restrict access to Web Help Desk if possible.
Other vulnerabilities in SolarWinds Web Help Desk
See all- CVE-2026-28323Critical
SolarWinds Web Help Desk is affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.
- CVE-2024-28987CriticalActively exploited
The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.
- CVE-2024-28986CriticalActively exploited
SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing.
Original NVD description (English source)
SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS