SolarWinds Web Help Desk Patch Bypass Leaves Actively Exploited Flaw Exposed

SolarWinds issued another fix for Web Help Desk after attackers were found exploiting a patch bypass that left a previously addressed vulnerability still reachable. The report says the flaw was being actively exploited, forcing the company to reissue remediation guidance and update customers again to close the bypass condition.

The incident highlights the operational risk of incomplete vulnerability remediation, where an initial patch can be circumvented and exposed systems remain vulnerable despite prior updates. Organizations running Web Help Desk were urged to apply the latest vendor fix immediately and verify that earlier mitigations had not left the product exposed to continued exploitation.