5 reportsPriority High
N-able N-Central and SolarWinds Web Help Desk vulnerabilities
A series of vulnerabilities in N-able N-Central and SolarWinds Web Help Desk could allow attackers to execute commands on affected systems, posing a risk to UK organisations using these products.
First report Latest
What is going on
- N-able N-Central was found to have an insecure deserialisation vulnerability that could lead to command execution, with reports of exploitation in the wild.
- SolarWinds Web Help Desk was identified as having a deserialisation of untrusted data vulnerability that could enable remote code execution on the host machine.
- A subsequent report highlighted another deserialisation vulnerability in SolarWinds Web Help Desk's AjaxProxy component, also with evidence of active exploitation.
- Other vulnerabilities in Google Chrome were disclosed but no specific exploitation details were provided in the reports.
- The timeline shows ongoing security issues across different software products with potential for remote system compromise.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority MediumType VulnerabilityLead report
N-able N-Central Insecure Deserialization Vulnerability
- Priority HighType Vulnerability
SolarWinds Web Help Desk Unsafe Deserialisation Vulnerability
- Priority HighType Vulnerability
SolarWinds Web Help Desk Unsafe Deserialisation Vulnerability
- Priority LowType Vulnerability
Origin validation error in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to bypass web origin policy via a crafted HTML page
- Priority LowType Vulnerability
Authorisation Flaw in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to bypass web origin policy via a crafted HTML page

