Loading vulnerability…
Memory Exhaustion Denial of Service in SolarWinds Web Help Desk
CVE-2026-28299 is a denial-of-service vulnerability affecting SolarWinds Web Help Desk versions earlier than 2026.2, including 2026.1 and earlier releases. Unauthenticated interaction with a vulnerable Web Help Desk endpoint can cause resource exhaustion, leaving insufficient memory and potentially crashing the server. The specific vulnerable function and triggering request format are not identified.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can exhaust server memory and crash SolarWinds Web Help Desk, interrupting access to the help desk application and its services. The duration of the disruption and recovery requirements are not specified.
If you can’t patch tonight, do this now.
Reduce network exposure by removing public internet access where possible, restricting access to trusted IP ranges, and requiring remote access through a VPN or zero trust network access service with MFA. These measures reduce access to the vulnerable endpoint but do not correct the underlying flaw. Disabling SAML authentication is not established as a mitigation for this denial-of-service vulnerability.
Patch, then assume compromise.
Upgrade SolarWinds Web Help Desk to 2026.2.1 or later and install current security updates. Version 2026.2 is also identified as a fixed release, although minimum fixed-version information is inconsistent. For upgrades from releases earlier than 2026.1, follow the documented sequence of upgrading to 2026.1 before upgrading to 2026.2.1.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
19 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.