CVE-2026-28323
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
SolarWinds Web Help Desk is affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.
Risk Assessment
An attacker can bypass authentication and gain unauthorized access to the help desk system, potentially leading to sensitive data leakage or privilege escalation.
Recommendation
Apply patches provided by SolarWinds and consider disabling SAML authentication if not required.
Other vulnerabilities in SolarWinds Web Help Desk
See all- CVE-2024-28987CriticalActively exploited
The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.
- CVE-2024-28986CriticalActively exploited
SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing.
- CVE-2026-28299High
SolarWinds Web Help Desk is affected by a denial-of-service vulnerability that can cause the server to crash due to insufficient memory.
Original NVD description (English source)
SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS