SolarWinds Web Help Desk Patch Fixes Unauthenticated DoS Flaw
Vulnerability Disclosure · 2 sources · Updated 4mo ago · First seen Jun 4, 2026
SolarWinds released a security update for Web Help Desk 2026.1 and all previous versions to remediate CVE-2026-28299, a network-exploitable denial-of-service vulnerability. According to the vendor notice cited by EG-FinCIRT, the flaw has low attack complexity and can be triggered without privileges or user interaction, increasing the risk of opportunistic exploitation against exposed systems.
Successful exploitation could exhaust memory, crash the Web Help Desk server, and disrupt service availability. Organizations using SolarWinds Web Help Desk were urged to validate and deploy the update as soon as testing is complete to reduce the risk of outages caused by unauthenticated attacks.
