Exploit / PoCcriticalExploited in the wild

SolarWinds Releases Hotfix for Critical CVE-2025

The Hacker Newsby @TheHackersNewsSep 23, 2025 · 12:46 UTC (Sep 23, 2025)2 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2025-26399 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-26399 CVE-2024-28988 CVE-2024-28986

Tags: cve-2025-26399 cve-2024-28988 cve-2024-28986 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-28986	Java Deserialization RCE in SolarWinds Web Help Desk	9.8	85%	KEV	Aug 13, 2024 KEV Aug 15, 2024
CVE-2024-28988	Unauthenticated Java Deserialization RCE in SolarWinds Web Help Desk	9.8	39%		Sep 1, 2025
CVE-2025-26399	Unauthenticated Deserialization RCE in SolarWinds Web Help Desk	9.8	90%	KEVRansomware	Sep 23, 2025 KEV Mar 9, 2026

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Sep 23, 2025 Vulnerability / Data Security SolarWinds has released hot fixes to address a critical security flaw impacting its Web Help Desk software that, if successfully exploited, could allow attackers to execute arbitrary commands on susceptible systems. The vulnerability, tracked as CVE-2025-26399 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.