Skip to main content
5 reportsPriority High

N-able N-Central and SolarWinds Web Help Desk vulnerabilities

A series of vulnerabilities in N-able N-Central and SolarWinds Web Help Desk could allow attackers to execute commands on affected systems, posing a risk to UK organisations using these products.

First report Latest

What is going on

  • N-able N-Central was found to have an insecure deserialisation vulnerability that could lead to command execution, with reports of exploitation in the wild.
  • SolarWinds Web Help Desk was identified as having a deserialisation of untrusted data vulnerability that could enable remote code execution on the host machine.
  • A subsequent report highlighted another deserialisation vulnerability in SolarWinds Web Help Desk's AjaxProxy component, also with evidence of active exploitation.
  • Other vulnerabilities in Google Chrome were disclosed but no specific exploitation details were provided in the reports.
  • The timeline shows ongoing security issues across different software products with potential for remote system compromise.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed