Approved changes feed: RSS · Atom

cpe:2.3:a:solarwinds:web_help_desk:12.8.7:-:*:*:*:*:*:*

part: a version: 12.8.7 update: -

VendorSolarwinds (c393915a-764f-5773-8a18-db4a4d0f1496)
ProductWeb Help Desk (4fa527cd-6714-5468-a682-84ccf3550fad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-26399 vulnerable 2026-06-08 07:12:51.594924 SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
CRITICAL (9.8)
SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability is a patch bypass of CVE-2024-28988, which in turn is a patch bypass of CVE-2024-28986.
Published: 2025-09-23T05:07:14.702Z
Updated: 2026-03-10T03:55:22.393Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.