Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2025-26399

CRITICAL
Published 2025-09-23T05:07:14.702Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2025-26399. We'll provide specific mitigation strategies based on your environment and risk profile.

CVSS Score

V3.1
9.8
/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score Metrics
Exploitability: N/A Impact: N/A

Attack Vector Metrics

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED

Impact Metrics

Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Description

SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability is a patch bypass of CVE-2024-28988, which in turn is a patch bypass of CVE-2024-28986.

Available Exploits

No exploits available for this CVE.

Related News

SolarWinds fixes critical Web Help Desk RCE vulnerability (CVE-2025-26399)

SolarWinds has fixed yet another unauthenticated remote code execution vulnerability (CVE-2025-26399) in Web Help Desk (WHD), its popular web-based IT ticketing and asset management solution. While the vulnerability is currently not being leveraged by attacke…

Help Net Security 2025-09-24 13:25
Read More
SolarWinds fixed a critical RCE flaw in its Web Help Desk software

SolarWinds fixed a critical flaw in its Web Help Desk software that could allow attackers to execute arbitrary commands on vulnerable systems. SolarWinds has released hot fixes to address a critical flaw, tracked as CVE-2025-26399 (CVSS score: 9.8), affecting…

Securityaffairs.com 2025-09-24 11:50
Read More
SolarWinds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw

SolarWinds has released hot fixes to address a critical security flaw impacting its Web Help Desk software that, if successfully exploited, could allow attackers to execute arbitrary commands on susceptible systems. The vulnerability, tracked as CVE-2025-2639…

Internet 2025-09-23 12:46
Read More

Affected Products

SolarWinds

Web Help Desk

Affected Versions:

12.8.7 and below

EU Vulnerability Database

Monitored by ENISA for EU cybersecurity

EU Coordination

EU Coordinated

Exploitation Status

No Known Exploitation

EUVD ID

View on ENISA

ENISA Analysis

Malicious code in bioql (PyPI)

Affected Products (ENISA)

solarwinds
web help desk

ENISA Scoring

CVSS Score (3.1)

9.8
/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.220
probability

ENISA References

https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26399
https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-8-7-hotfix-1_release_notes.htm
https://nvd.nist.gov/vuln/detail/CVE-2025-26399

Data provided by ENISA EU Vulnerability Database. Last updated: October 3, 2025

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed CRITICAL

GHSA-vfrj-f292-3f24

Advisory Details

SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability is a patch bypass of CVE-2024-28988, which in turn is a patch bypass of CVE-2024-28986.

CVSS Scoring

CVSS Score

9.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-26399
WEB https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-8-7-hotfix-1_release_notes.htm
WEB https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26399

Advisory provided by GitHub Security Advisory Database. Published: September 23, 2025, Modified: September 23, 2025

Social Media Intelligence

Real-time discussions and threat intelligence from social platforms

6 posts
Reddit • 1 week, 5 days ago
crstux
Exploit

🔥 Top 10 Trending CVEs (26/09/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-20333](https://nvd.nist.gov/vuln/detail/CVE-2025-20333)** - 📝 A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, …

Also mentions: CVE-2025-10184 CVE-2025-10585 CVE-2025-20352 CVE-2024-28988 CVE-2025-6198 CVE-2025-7937 CVE-2025-10035 CVE-2025-51591 CVE-2024-28986
2
2.0
View Original High Risk
Reddit • 1 week, 6 days ago
crstux
Exploit

🔥 Top 10 Trending CVEs (25/09/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-51591](https://nvd.nist.gov/vuln/detail/CVE-2025-51591)** - 📝 A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe. - 📅 **Published:** …

Also mentions: CVE-2025-10585 CVE-2025-20352 CVE-2024-28988 CVE-2025-59689 CVE-2025-6198 CVE-2025-7937 CVE-2025-10035 CVE-2025-8061 CVE-2025-51591 CVE-2024-28986
1
1.0
View Original High Risk
Reddit • 2 weeks ago
crstux
Exploit

🔥 Top 10 Trending CVEs (24/09/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-26399](https://nvd.nist.gov/vuln/detail/CVE-2025-26399)** - 📝 SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution vulnerability that, if exploited, would allow an attacker to run commands …

Also mentions: CVE-2024-28988 CVE-2025-55241 CVE-2024-28986 CVE-2023-27532 CVE-2022-26500 CVE-2021-27876 CVE-2021-26857 CVE-2015-2291
2
2.0
View Original High Risk
Reddit • 2 weeks ago
quellaman

SolarWinds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw

1
1.0
View Original
Reddit • 2 weeks, 1 day ago
Suspicious_Bug4112

SolarWinds Web Help Desk Vulnerability Allows Unauthenticated RCE **Date:** 23-Sep-25 SolarWinds has issued an urgent advisory regarding a critical vulnerability in its Web Help Desk software, identified as CVE-2025-26399, which allows unauthenticated remote code execution (RCE) with a severity rating of 9.8 out of 10. This flaw stems from the …

1
1.0
View Original
Reddit • 2 weeks, 1 day ago
falconupkid

SolarWinds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw SolarWinds has released hot fixes to address a critical security flaw impacting its Web Help Desk software that, if successfully exploited, could allow attackers to execute arbitrary commands on susceptible systems. The vulnerability,... **CVEs:** CVE-2025-26399 **Source:** https://thehackernews.com/2025/09/solarwinds-releases-hotfix-for-critical.html

1
1.0
View Original

References

https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26399
https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-8-7-hotfix-1_release_notes.htm
Published: 2025-09-23T05:07:14.702Z
Last Modified: 2025-09-24T03:55:11.851Z
Copied to clipboard!