#WebHelpDesk
LightNews LightNews
neroqc.bsky.social
PoC Released for SolarWinds Web Help Desk Vulnerability Exposing Passwords
gbhackers.com/poc-released...

#Infosec #Security #Cybersecurity #CeptBiro #PoCReleased #SolarWinds #WebHelpDesk #Vulnerability #Passwords
PoC Released for SolarWinds Web Help Desk Vulnerability Exposing Passwords
A Proof-of-Concept (PoC) has been released for a significant vulnerability discovered in SolarWinds Web Help Desk.
gbhackers.com
March 11, 2025 at 10:17 PM
thedailytechfeed.com
SolarWinds fixes critical SAML auth bypass in Web Help Desk; update to 2026.2.1 now. #SolarWinds #WebHelpDesk #SAML #CyberSecurity #Vulnerability #SecurityUpdate thedailytechfeed.com/critical-fla...
July 31, 2026 at 9:14 AM
securityonline.bsky.social
A SolarWinds Web Help Desk SAML authentication bypass, CVE-2026-28323, scores a critical CVSS 9.8. Update to 2026.2.1 to stay protected.

#SolarWinds #WebHelpDesk #CVE202628323 #SAML #InfoSec
SolarWinds Web Help Desk SAML Bypass CVE-2026-28323 Scores CVSS 9.8
TL;DR SolarWinds has patched a critical authentication bypass in SolarWinds Web Help Desk. Tracked as CVE-2026-28323, the SAML flaw carries a CVSS score of 9.8. The 2026.2.1 release also fixes a denial-of-service bug, CVE-2026-28299. SolarWinds reports no exploitation in the wild for either issue. Why it matters Web Help Desk handles IT tickets and asset data for many organizations. That data makes it a prize for attackers.
securityonline.info
July 31, 2026 at 2:53 AM
bitralix.com
En un help desk, una vulnerabilidad no es “solo un bug”: puede impactar soporte, credenciales e incluso el movimiento lateral en la red.

Dejamos guía práctica (consecuencias + prevención + checklist):
bitralix.es/91y3z

#InfoSec #Ciberseguridad #SolarWinds #WebHelpDesk #Hardening #PatchManagement
March 6, 2026 at 9:00 AM
neroqc.bsky.social
SolarWinds Web Help Desk Vulnerability Enables Unauthenticated RCE
cybersecuritynews.com/solarwinds-w...

#Infosec #Security #Cybersecurity #CeptBiro #SolarWinds #WebHelpDesk #Vulnerability #Unauthenticated #RCE
SolarWinds Web Help Desk Vulnerability Enables Unauthenticated RCE
SolarWinds has released an urgent security advisory for a critical vulnerability in its Web Help Desk software that could allow an unauthenticated attacker to achieve remote code execution (RCE).
cybersecuritynews.com
September 23, 2025 at 8:34 PM
cybermaterial.bsky.social
SolarWinds Fixes Critical Web Desk Flaws
Read More: buff.ly/cm9aeex

#SolarWinds #WebHelpDesk #CriticalPatch #RemoteCodeExecution #AuthBypass #EnterpriseSecurity #VulnerabilityManagement #PatchNow
January 30, 2026 at 4:00 PM
thedailytechfeed.com
SolarWinds addresses critical vulnerabilities in Web Help Desk, including unauthenticated RCE and authentication bypass flaws. Users urged to update to WHD 2026.1 promptly. #CyberSecurity #SolarWinds #WebHelpDesk Link: thedailytechfeed.com/solarwinds-i...
January 30, 2026 at 3:45 PM
r-netsec.bsky.social
CVE-2025-40551: SolarWinds WebHelpDesk RCE Deep-Dive and Indicators of Compromise
CVE-2025-40551: SolarWinds WebHelpDesk RCE Deep-Dive and Indicators of Compromise
horizon3.ai
May 8, 2026 at 5:11 AM
r-netsec.bsky.social
CVE-2025-40551: SolarWinds WebHelpDesk RCE Deep-Dive and Indicators of Compromise
CVE-2025-40551: SolarWinds WebHelpDesk RCE Deep-Dive and Indicators of Compromise
horizon3.ai
January 28, 2026 at 5:39 PM
kumoridomee.bsky.social
secure.gungho.jp/webhelpdesk/...
ログイン
ガンホーのPCオンラインゲーム アトラクションセンター
secure.gungho.jp
May 21, 2024 at 6:43 AM
r-netsec-bot.bsky.social
CVE-2025-40551: SolarWinds WebHelpDesk RCE Deep-Dive and Indicators of Compromise
CVE-2025-40551: SolarWinds WHD RCE
Horizon3.ai discovered multiple vulnerabilities in SolarWinds Web Help Desk that enable unauthenticated remote code execution.
horizon3.ai
January 28, 2026 at 4:58 PM
nathanmcnulty.com
At one point, the default for WebHelpDesk was that all attachments were available without authentication so email links for tickets would give a better experience

The attachment URI naming convention is predictable...

I bet there's plenty of installs that never changed it :-/ https://t.co/dQBh...
November 17, 2024 at 11:08 PM