// tag

SolarWinds

Security incidents tagged SolarWinds. Newest first.

## 4 SolarWinds incidents in the last year

through Oct 22, 2026

crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore

show 4 older incidents

Jun 5highSolarWinds Serv-U: SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerabilitypatched
› SolarWinds Serv-U patched
SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication. Added to CISA KEV on 2026-06-05.
open incident →CVE-2026-28318

Mar 9highSolarWinds Web Help Desk: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerabilitypatched
› SolarWinds Web Help Desk patched
SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine. Added to CISA KEV on 2026-03-09.
open incident →CVE-2025-26399

Feb 12highSolarWinds Web Help Desk: SolarWinds Web Help Desk Security Control Bypass Vulnerabilitypatched
› SolarWinds Web Help Desk patched
SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauthenticated attacker to gain access to certain restricted functionality. Added to CISA KEV on 2026-02-12.
open incident →CVE-2025-40536
Feb 3highSolarWinds Web Help Desk: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerabilitypatched
› SolarWinds Web Help Desk patched
SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication. Added to CISA KEV on 2026-02-03.
open incident →CVE-2025-40551