CyberSIXT Search
Vendor

SolarWinds

CVEs tracked · all time
21
in CISA KEV · all time
4
articles · since 11 Sep
2
articles · all time
39

2 articles since 11 Sep.

Show as table
SolarWinds: articles per day
Day (UTC)Articles
Wed 23 Sep1
Thu 24 Sep1
See the full timeline

Products: Access Rights Manager, Observability Self-Hosted, Serv-U, Web Help Desk

CVEs

21 CVEs
CVE-2026-28318SolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilityCVSS7.5HighExploited44%EPSS10articles
CVE-2025-26399SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityCVSS9.8CriticalExploited90%EPSS11articles
CVE-2025-40551SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityCVSS9.8CriticalExploited84%EPSS15articles
CVE-2025-40536SolarWinds Web Help Desk Security Control Bypass VulnerabilityCVSS8.1HighExploited74%EPSS12articles
CVE-2026-28324SolarWinds Observability Self-Hosted Remote Code Execution VulnerabilityCVSS9.8Critical–Not in KEV0.7%EPSS2articles
CVE-2026-28325SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution VulnerabilityCVSS8.8High–Not in KEV1.5%EPSS2articles
CVE-2026-28326SolarWinds Access Rights Manager Unauthenticated Remote Code Execution VulnerabilityCVSS8.8High–Not in KEV0.7%EPSS1article
CVE-2026-28321SolarWinds Serv-U Broken Access Control VulnerabilityCVSS9.1Critical–Not in KEV0.6%EPSS1article
CVE-2026-28308SolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilityCVSS9.1Critical–Not in KEV0.8%EPSS1article
CVE-2026-28307SolarWinds Serv-U Privilege Escalation VulnerabilityCVSS9.1Critical–Not in KEV0.5%EPSS1article
CVE-2025-40541SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution VulnerabilityCVSSUnrated–Not in KEV0.6%EPSS3articles
CVE-2025-40540SolarWinds Serv-U Type Confusion Remote Code Execution VulnerabilityCVSSUnrated–Not in KEV0.5%EPSS3articles
9 more CVEs
CVE-2025-40539SolarWinds Serv-U Type Confusion Remote Code Execution VulnerabilityCVSSUnrated–Not in KEV0.5%EPSS3articles
CVE-2025-40538SolarWinds Serv-U Broken Access Control Remote Code Execution VulnerabilityCVSSUnrated–Not in KEV0.5%EPSS3articles
CVE-2025-40549SolarWinds Serv-U Path Restriction Bypass VulnerabilityCVSSUnrated–Not in KEV1.1%EPSS1article
CVE-2025-40548SolarWinds Serv-U Broken Access Control - Remote Code Execution VulnerabilityCVSSUnrated–Not in KEV0.8%EPSS1article
CVE-2024-28988SolarWinds Web Help Desk Java Deserialization Remote Code Execution VulnerabilityCVSSUnrated–Not in KEV39%EPSS2articles
CVE-2025-40554SolarWinds Web Help Desk Authentication Bypass VulnerabilityCVSSUnrated–Not in KEV61%EPSS6articles
CVE-2025-40553SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution VulnerabilityCVSSUnrated–Not in KEV68%EPSS6articles
CVE-2025-40552SolarWinds Web Help Desk Authentication Bypass VulnerabilityCVSSUnrated–Not in KEV52%EPSS6articles
CVE-2025-40537SolarWinds Web Help Desk Hardcoded Credentials VulnerabilityCVSSUnrated–Not in KEV0.6%EPSS6articles

Coverage

39 articles, all timeFull timeline RSS feed
  1. SolarWinds Patches Critical Observability Flaw Enabling Remote Code ExecutionSecurityWeek
  2. SolarWinds Fixes Critical Flaws Enabling Remote Code ExecutionSecurityOnline
  3. SolarWinds Patches Three Critical Serv-U Vulnerabilities Enabling RCESecurityOnline
  4. CISA warns of DoS risk in SolarWinds Serv-U flaw CVE-2026-28318SecurityWeek
  5. Attackers exploit CVE-2026-28318 and Zip Slip in Collibra AgentSecurityOnline
  6. Verizon VoLTE flaw CVE-2026-28318 exposes calls to interceptionSecurityOnline
  7. SolarWinds ServU bug lets attackers drain system resourcesSecurityOnline
  8. Cryptographic Sanctuaries: OpenAI Unveils “Lockdown Mode” to Counter Prompt Injection RisksSecurityOnline
  9. CISA flags SolarWinds ServU DoS bug CVE-2026-28318 for patchSecurity Affairs
  10. CISA Warns of Actively Exploited SolarWinds Serv-U FlawSecurityOnline
  11. CISA warns of exploited SolarWinds Serv-U flaw, urges patchingCISA · official notice
  12. CISA warns of active SolarWinds ServU exploit CVE-2026-28318CISA · official notice
  13. CISA adds CVE‑2026‑28318 to KEV after SolarWinds ServU attacksCISA · official notice
  14. Hackers Abuse QEMU for Defense EvasionSecurityWeek
  15. CISA adds Ivanti CVE-2026-1603 auth bypass to KEV, patch nowSecurityWeek
  16. CISA Adds KEV Flaws CVE-2021-22054 CVE-2025-26399 CVE-2026-1603Security Affairs
  17. CISA flags KEV amid active exploits CVE-2025-26399 CVE-2026-1603The Hacker News
  18. CISA KEV flags CVE-2025-26399 in SolarWinds Web Help DeskCISA · official notice
  19. CISA Adds CVE-2025-26399 to KEV for SolarWinds Web Help Desk RCECISA · official notice
  20. SolarWinds patches four ServU file transfer RCEs, update to 15.5.4SecurityWeek
  21. SolarWinds fixes Serv U file transfer RCE flaws needing adminThe Hacker News
  22. SolarWinds fixes four Serv U file server bugs that allow rootSecurity Affairs
  23. CISA Warns of Exploited SolarWinds, Notepad++, Microsoft VulnerabilitiesSecurityWeek
  24. Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 VulnerabilityThe Hacker News
  25. U.S. CISA adds SolarWinds Web Help Desk, Notepad++, Microsoft Configuration Manager, and Apple devices flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
  26. SolarWinds WHD Attacks Highlight Risks of Exposed AppsDark Reading
  27. Virtual Invasion: SolarWinds WHD Exploited to Host Hidden QEMU VMsSecurityOnline
  28. SolarWinds Web Help Desk Exploited for RCE in Multi-Stage Attacks on Exposed ServersThe Hacker News
  29. Attackers abuse SolarWinds Web Help Desk to install Zoho agents and VelociraptorSecurity Affairs
  30. Recent SolarWinds Flaws Potentially Exploited as Zero-DaysSecurityWeek
  31. PoC Public & Exploited: Critical SolarWinds Help Desk Flaw Exploited in the WildSecurityOnline
  32. Fresh SolarWinds Vulnerability Exploited in AttacksSecurityWeek
  33. CISA Adds Actively Exploited SolarWinds Web Help Desk RCE to KEV CatalogThe Hacker News
  34. U.S. CISA adds SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
  35. SolarWinds Web Help Desk Update Addresses High-Risk RCE & Auth Bypass BugsSOCRadar
  36. SolarWinds addressed four critical Web Help Desk flawsSecurity Affairs
  37. SolarWinds Patches Critical Web Help Desk VulnerabilitiesSecurityWeek
  38. SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth BypassThe Hacker News
  39. SolarWinds Web Help Desk Hit with Multiple RCE and Auth Bypass VulnerabilitiesSecurityOnline · first in our coverage

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device