Web Help Desk 12.8 vulnerabilities
4 advisories affect SolarWinds Web Help Desk 12.8, 4 already exploited by attackers. Latest: March 9, 2026.
Running Web Help Desk 12.8 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Web Help Desk 12.8 alerts
Turn on Web Help Desk 12.8 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CVE-2025-26399 · March 9, 2026 | Critical 9.8 Exploited | up to 12.8.7 |
| SolarWinds Web Help Desk Security Control Bypass Vulnerability CVE-2025-40536 · February 12, 2026 | High 8.1 Exploited | up to 12.8.8 HF1 |
| SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CVE-2025-40551 · February 3, 2026 | Critical 9.8 Exploited | up to 12.8.8 HF1 |
| SolarWinds Web Help Desk Hardcoded Credential Vulnerability CVE-2024-28987 · October 15, 2024 | Critical 9.1 Exploited | 12.8.3 Hotfix 1 and previous versions |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.