CVE-2026-28323

CriticalCVSS 9.8

Published: 30/07/2026(UTC)Updated: 31/07/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.64%

47th percentile - higher than 47% of all known CVEs

Summary

SolarWinds Web Help Desk is affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.

Risk Assessment

An attacker can bypass authentication and gain unauthorized access to the help desk system, potentially leading to sensitive data leakage or privilege escalation.

Recommendation

Apply patches provided by SolarWinds and consider disabling SAML authentication if not required.

Original NVD description (English source)

SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.