SolarWinds Web Help Desk
Moderate fix1 remedy
cpe:2.3:a:solarwinds:web_help_desk:*:*:*:*:*:*:*, +1 more
Moderate fix1 remedy
SolarWinds Web Help Desk Untrusted Data Deserialization Remote Code Execution Vulnerability
Vulnerability
Patched
A remote code execution vulnerability has been identified in SolarWinds Web Help Desk. This issue arises from an untrusted data deserialization flaw that could allow an attacker to execute commands on the host machine. The vulnerability can be exploited without authentication.
Impact
Exploitation of this vulnerability allows for remote code execution on the host machine where Web Help Desk is running.
Remediation
Users can upgrade to SolarWinds Web Help Desk version 2026.1 or later, where this vulnerability has been fixed. Instructions for downloading the latest version are available on the SolarWinds website and through the Customer Portal.
Added: Jan 28, 2026, 8:23 AM
Updated: Jan 28, 2026, 8:23 AM
Vulnerability Rating
Custom Algorithm
spread
5.0impact
2.5exploitability
6.8remediation
7.7relevance
2.3threat
0.3urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.