Security Digest
SolarWinds: known exploited vulnerabilities
7 SolarWinds CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-06-05 | CVE-2026-28318 | SolarWinds Serv-U SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | 2026-06-19 |
| 2026-03-09 | CVE-2025-26399 | SolarWinds Web Help Desk SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Ransomware | 2026-03-12 |
| 2026-02-12 | CVE-2025-40536 | SolarWinds Web Help Desk SolarWinds Web Help Desk Security Control Bypass Vulnerability | 2026-02-15 |
| 2026-02-03 | CVE-2025-40551 | SolarWinds Web Help Desk SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 2026-02-06 |
| 2024-10-15 | CVE-2024-28987 | SolarWinds Web Help Desk SolarWinds Web Help Desk Hardcoded Credential Vulnerability | 2024-11-05 |
| 2024-08-15 | CVE-2024-28986 | SolarWinds Web Help Desk SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 2024-09-05 |
| 2024-07-17 | CVE-2024-28995 | SolarWinds Serv-U SolarWinds Serv-U Path Traversal Vulnerability | 2024-08-07 |