CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 07:30 UTC)

What this means for you

This week: 5,443 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,443; Show in the list
Critical, last 7 days: 355; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product solarwinds:web_help_desk. Show all products

11 CVEs, showing 1 to 11

CVE	Severity	Title	Published
CVE-2026-28323	Critical 9.8	SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability.	Jul 30, 2026
CVE-2026-28299	High 7.5	SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.	Jun 2, 2026
CVE-2025-40554	Critical 9.8	SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.	Jan 28, 2026
CVE-2025-40553	Critical 9.8	SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the…	Jan 28, 2026
CVE-2025-40552	Critical 9.8	SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected…	Jan 28, 2026
CVE-2025-40537	High 7.5	SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions.	Jan 28, 2026
CVE-2025-40551 Known exploited	Critical 9.8	SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability Assigned by SolarWinds	Jan 28, 2026
CVE-2025-40536 Known exploited	High 8.1	SolarWinds Web Help Desk Security Control Bypass Vulnerability Assigned by SolarWinds	Jan 28, 2026
CVE-2025-26399 Known exploited	Critical 9.8	SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability Assigned by SolarWinds	Sep 23, 2025
CVE-2024-28987 Known exploited	Critical 9.1	SolarWinds Web Help Desk Hardcoded Credential Vulnerability Assigned by SolarWinds	Aug 21, 2024
CVE-2024-28986 Known exploited	Critical 9.8	SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability Assigned by SolarWinds	Aug 13, 2024

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.