SolarWinds vulnerabilities

7 advisories tracked, 7 actively exploited. Last update: June 5, 2026.

By product: Serv-U (2) · Web Help Desk (5)

• CVE-2026-28318June 5, 2026High 7.5Exploited
  SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
• CVE-2025-26399March 9, 2026Critical 9.8Exploited
  SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
• CVE-2025-40536February 12, 2026High 8.1Exploited
  SolarWinds Web Help Desk Security Control Bypass Vulnerability
• CVE-2025-40551February 3, 2026Critical 9.8Exploited
  SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
• CVE-2024-28987October 15, 2024Critical 9.1Exploited
  SolarWinds Web Help Desk Hardcoded Credential Vulnerability
• CVE-2024-28986August 15, 2024Critical 9.8Exploited
  SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
• CVE-2024-28995July 17, 2024High 8.6Exploited
  SolarWinds Serv-U Path Traversal Vulnerability