SolarWinds security briefs
5 published alerts for SolarWinds products and services.
SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
SolarWinds Serv-U is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-28318). SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication. CISA remediation due date: 2026-06-19. If you need help checking exposure, call (864) 335-9223.
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
SolarWinds Web Help Desk is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-26399). SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine. CISA remediation due date: 2026-03-12. If you need help checking exposure, call (864) 335-9223.
SolarWinds Web Help Desk Security Control Bypass Vulnerability
SolarWinds Web Help Desk is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-40536). SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauthenticated attacker to gain access to certain restricted functionality. CISA remediation due date: 2026-02-15. If you need help checking exposure, call (864) 335-9223.
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
SolarWinds Web Help Desk is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-40551). SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication. CISA remediation due date: 2026-02-06. If you need help checking exposure, call (864) 335-9223.
SolarWinds Serv-U Remote Code Execution Vulnerability
SolarWinds Serv-U is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-35211). SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.