pwn.watch: SolarWinds incident updates https://pwn.watch/t/solarwinds Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:23:59 GMT [high] SolarWinds Serv-U: SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability: CISA added CVE-2026-28318 to the KEV catalog (due 2026-06-19). https://pwn.watch/i/solarwinds-serv-u-cve-2026-28318 solarwinds-serv-u-cve-2026-28318:2026-06-05:CISA added CVE-2026-28318 to the KEV catalog (due 2026-06-19). Fri, 05 Jun 2026 00:00:00 GMT high Status: closed, patched [high] SolarWinds Web Help Desk: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability: CISA added CVE-2025-26399 to the KEV catalog (due 2026-03-12). https://pwn.watch/i/solarwinds-web-help-desk-cve-2025-26399 solarwinds-web-help-desk-cve-2025-26399:2026-03-09:CISA added CVE-2025-26399 to the KEV catalog (due 2026-03-12). Mon, 09 Mar 2026 00:00:00 GMT high Status: closed, patched [high] SolarWinds Web Help Desk: SolarWinds Web Help Desk Security Control Bypass Vulnerability: CISA added CVE-2025-40536 to the KEV catalog (due 2026-02-15). https://pwn.watch/i/solarwinds-web-help-desk-cve-2025-40536 solarwinds-web-help-desk-cve-2025-40536:2026-02-12:CISA added CVE-2025-40536 to the KEV catalog (due 2026-02-15). Thu, 12 Feb 2026 00:00:00 GMT high Status: closed, patched [high] SolarWinds Web Help Desk: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability: CISA added CVE-2025-40551 to the KEV catalog (due 2026-02-06). https://pwn.watch/i/solarwinds-web-help-desk-cve-2025-40551 solarwinds-web-help-desk-cve-2025-40551:2026-02-03:CISA added CVE-2025-40551 to the KEV catalog (due 2026-02-06). Tue, 03 Feb 2026 00:00:00 GMT high Status: closed, patched [critical] SolarWinds Web Help Desk Hardcoded Credential: CISA added CVE-2024-28987 to the KEV catalog (federal deadline 2024-11-05) https://pwn.watch/i/solarwinds-web-help-desk-cve-2024-28987 solarwinds-web-help-desk-cve-2024-28987:2024-10-15:CISA added CVE-2024-28987 to the KEV catalog (federal deadline 2024-11-05) Tue, 15 Oct 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] SolarWinds Web Help Desk Hardcoded Credential: CVE-2024-28987 published https://pwn.watch/i/solarwinds-web-help-desk-cve-2024-28987 solarwinds-web-help-desk-cve-2024-28987:2024-08-21:CVE-2024-28987 published Wed, 21 Aug 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-28987 Status: closed, patched [critical] SolarWinds Web Help Desk Deserialization of Untrusted Data: CISA added CVE-2024-28986 to the KEV catalog (federal deadline 2024-09-05) https://pwn.watch/i/solarwinds-web-help-desk-cve-2024-28986 solarwinds-web-help-desk-cve-2024-28986:2024-08-15:CISA added CVE-2024-28986 to the KEV catalog (federal deadline 2024-09-05) Thu, 15 Aug 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] SolarWinds Web Help Desk Deserialization of Untrusted Data: CVE-2024-28986 published https://pwn.watch/i/solarwinds-web-help-desk-cve-2024-28986 solarwinds-web-help-desk-cve-2024-28986:2024-08-13:CVE-2024-28986 published Tue, 13 Aug 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-28986 Status: closed, patched [high] SolarWinds Serv-U Path Traversal: CISA added CVE-2024-28995 to the KEV catalog (federal deadline 2024-08-07) https://pwn.watch/i/solarwinds-serv-u-cve-2024-28995 solarwinds-serv-u-cve-2024-28995:2024-07-17:CISA added CVE-2024-28995 to the KEV catalog (federal deadline 2024-08-07) Wed, 17 Jul 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] SolarWinds Serv-U Path Traversal: CVE-2024-28995 published https://pwn.watch/i/solarwinds-serv-u-cve-2024-28995 solarwinds-serv-u-cve-2024-28995:2024-06-06:CVE-2024-28995 published Thu, 06 Jun 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2024-28995 Status: closed, patched