Skip to main content
Apexward Pulse
5 reportsPriority Medium

SolarWinds Web Help Desk vulnerabilities

Multiple vulnerabilities have been reported in SolarWinds Web Help Desk, including deserialisation and security control bypass issues that could allow remote code execution or unauthorised access. These flaws are being actively exploited, posing a risk to UK organisations using the software.

First report Latest

What is going on

  • SolarWinds Web Help Desk was reported to contain a deserialisation of untrusted data vulnerability that could lead to remote code execution.
  • A separate security control bypass vulnerability in SolarWinds Web Help Desk was reported, which could allow unauthenticated access to restricted functionality.
  • CISA has listed some of these vulnerabilities as being actively exploited in the wild.
  • A new deserialisation vulnerability in SolarWinds Web Help Desk was reported in March 2026, with CISA noting exploitation in the wild.
  • Other software such as Microsoft Office Word and RoundCube Webmail have also been reported to contain separate vulnerabilities that could allow privilege escalation or remote code execution.
  • What to watch: Further confirmation of the extent of exploitation and updates on mitigation efforts for affected systems.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed