Critical · published September 23, 2025
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 99.8th percentile for exploit probability.
🚨 A single unauthenticated Ajax request can unlock the door to command execution on your SolarWinds Web Help Desk! 🔥 Think of it like a rogue vendor sneaking into a corporate office, bypassing security checks, and getting access to the main server room without anyone noticing — absolutely terrifying! If an attacker leverages this vulnerability, they could execute arbitrary commands on the host machine, leading to full control over your system. This means they could steal sensitive data, alter configurations, or even bring your operations to a halt — a nightmare scenario for any organization!
Think of it like a rogue vendor sneaking into a corporate office, bypassing security checks, and getting access to the main server room without anyone noticing — absolutely terrifying! This vulnerability involves a deserialization flaw in the AjaxProxy component of the SolarWinds Web Help Desk, allowing unauthenticated users to execute remote code due to a patch bypass of earlier vulnerabilities.
If an attacker leverages this vulnerability, they could execute arbitrary commands on the host machine, leading to full control over your system. This means they could steal sensitive data, alter configurations, or even bring your operations to a halt — a nightmare scenario for any organization! Immediate action is required! Upgrade to the latest version of SolarWinds Web Help Desk that addresses CVE-2025-26399. Additionally, review your system settings to ensure that no unauthorized access is possible and monitor logs for any suspicious activities. You've got this! With these steps, you'll be protecting your environment in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| solarwinds/web_help_desk | ≤ 12.8.6 | — |
| solarwinds/web_help_desk | all versions | — |