SolarWinds addressed critical RCEs in Access Rights ManagerSecurity Affairs·Feb 19, 07:48 UTC · Feb 19, 2024VulnerabilityCVE-2023-40057CVE-2024-23476CVE-2024-23477+4 CVEs60
SolarWinds issues patches for two new critical bugs found in Orion softwareCyberScoop·Feb 3, 13:12 UTC · Feb 3, 2021Vulnerability in the wild60
SolarWinds Patches 8 Critical Flaws in Access Rights Manager SoftwareThe Hacker News·Jul 20, 04:07 UTC · Jul 20, 2024Vulnerability in the wildCVE-2024-23472CVE-2024-28074CVE-2024-23469+6 CVEs60
SolarWinds addressed four critical Web Help Desk flawsSecurity Affairs·Jan 29, 19:17 UTC · Jan 29, 2026VulnerabilityCVE-2025-40552CVE-2025-40553CVE-2025-40554+3 CVEs60
SolarWinds Urges Upgrade After Revealing Critical RCE BugInfosecurity Magazine·Aug 15, 09:35 UTC · Aug 15, 2024VulnerabilityCVE-2024-2898660
RCE vulnerabilities fixed in SolarWinds enterprise solutionsHelp Net Security·Feb 19, 00:00 UTC · Feb 19, 2024VulnerabilityCVE-2024-23476CVE-2024-23479CVE-2024-23477+4 CVEs60
SolarWinds fixed three critical RCE flaws in its Access Rights Manager productSecurity Affairs·Oct 23, 11:52 UTC · Oct 23, 2023VulnerabilityCVE-2023-35182CVE-2023-35185CVE-2023-3518760
SolarWinds breach has industrial firms checking their networks for vulnerabilitiesCyberScoop·Dec 16, 14:32 UTC · Dec 16, 2020Vulnerability in the wild60
Critical RCE bug in SolarWinds Web Help Desk fixed (CVE-2024-28986)Help Net Security·Aug 15, 00:00 UTC · Aug 15, 2024Vulnerability in the wildCVE-2024-2898660
SolarWinds addressed a critical RCE in all Web Help Desk versionsSecurity Affairs·Aug 14, 16:30 UTC · Aug 14, 2024VulnerabilityCVE-2024-2898660
Three More Vulnerabilities Found in SolarWinds ProductsInfosecurity Magazine·Feb 4, 11:35 UTC · Feb 4, 2021VulnerabilityCVE-2021-25274CVE-2021-25275CVE-2021-252760
CISA orders federal agencies to patch exploited SolarWinds, Apple, Microsoft bugs within weeksThe Record·Feb 13, 14:58 UTC · Feb 13, 2026Vulnerability in the wildCVE-2025-40536CVE-2026-20700CVE-2025-14174+5 CVEs160
SolarWinds fixed critical RCE CVE-2024Security Affairs·Sep 16, 10:59 UTC · Sep 16, 2024VulnerabilityCVE-2024-28991CVE-2024-2899060
SolarWinds fixes severe Serv-U vulnerability (CVE-2024-28995)Help Net Security·Jun 8, 10:34 UTC · Jun 8, 2026Vulnerability in the wildCVE-2024-28995160
SolarWinds Serv-U hit by four critical RCE-level vulnerabilitiesHelp Net Security·Jun 8, 10:28 UTC · Jun 8, 2026Vulnerability in the wildCVE-2025-40538CVE-2025-40539CVE-2025-40540+1 CVEs60
SolarWinds Patches 4 Critical Serv-U 15.5 Flaws Allowing Root Code ExecutionThe Hacker News·Feb 25, 07:04 UTC · Feb 25, 2026Vulnerability in the wildCVE-2025-40538CVE-2025-40539CVE-2025-40540+4 CVEs60
SolarWinds Web Help Desk Vulnerability Actively ExploitedInfosecurity Magazine·Feb 4, 10:15 UTC · Feb 4, 2026Vulnerability in the wildCVE-2025-40551CVE-2025-40553CVE-2025-40552+1 CVEs60
CISA orders federal agencies to patch exploited SolarWinds bug by FridayThe Record·Feb 3, 20:59 UTC · Feb 3, 2026Vulnerability in the wildCVE-2025-40551CVE-2024-2898660
SolarWinds addressed three critical flaws in Serv-USecurity Affairs·Nov 21, 14:08 UTC · Nov 21, 2025VulnerabilityCVE-2025-40549CVE-2025-40548CVE-2025-4054760
SolarWinds fixed a critical RCE flaw in its Web Help Desk softwareSecurity Affairs·Sep 24, 11:50 UTC · Sep 24, 2025Vulnerability in the wildCVE-2025-26399CVE-2024-28988CVE-2024-2898660
SolarWinds Releases Patch for Critical Flaw in Web Help Desk SoftwareThe Hacker News·Aug 19, 05:04 UTC · Aug 19, 2024Vulnerability in the wildCVE-2024-28986CVE-2024-5914CVE-2024-5915+1 CVEs60
CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318)Help Net Security·Jun 8, 00:00 UTC · Jun 8, 2026Vulnerability in the wildCVE-2026-28318CVE-2021-35211CVE-2021-35247+1 CVEs60
SolarWinds fixes critical Web Help Desk RCE vulnerability (CVE-2025-26399)Help Net Security·Mar 9, 17:22 UTC · Mar 9, 2026Vulnerability in the wildCVE-2025-26399CVE-2024-28988CVE-2024-2898660
Unpatched SolarWinds WHD instances under active attackHelp Net Security·Mar 9, 17:22 UTC · Mar 9, 2026Vulnerability in the wildCVE-2025-26399160
SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth BypassThe Hacker News·Mar 2, 06:04 UTC · Mar 2, 2026Vulnerability in the wildCVE-2025-40536CVE-2025-40537CVE-2025-40551+7 CVEs60
SolarWinds patches four critical ServSecurity Affairs·Feb 24, 20:07 UTC · Feb 24, 2026Vulnerability in the wildCVE-2025-40538CVE-2025-40540CVE-2025-40539+5 CVEs60
SolarWinds fixes critical Web Help Desk RCE vulnerabilities, upgrade ASAP!Help Net Security·Feb 13, 14:00 UTC · Feb 13, 2026Vulnerability in the wildCVE-2025-40536CVE-2025-40537CVE-2025-40551+5 CVEs60
Hardcoded Credential Vulnerability Found in SolarWinds Web Help DeskThe Hacker News·Sep 26, 10:11 UTC · Sep 26, 2024Vulnerability in the wildCVE-2024-28987CVE-2024-2898660
New SolarWinds Serv-U vulnerability targeted in Log4j-related attacksHelp Net Security·Jan 20, 00:00 UTC · Jan 20, 2022Vulnerability in the wildCVE-2021-35247CVE-2021-3521160
Solarwinds Orion Platform updates fix two remote code execution issuesSecurity Affairs·Mar 26, 14:37 UTC · Mar 26, 2021VulnerabilityCVE-2021-3109CVE-2020-3585660
CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively ExploitedThe Hacker News·Mar 11, 07:17 UTC · Mar 11, 2026Vulnerability in the wildCVE-2021-22054CVE-2025-26399CVE-2026-160360
CISA shortens patch deadline for critical Ivanti, SolarWinds bugsThe Record·Mar 10, 13:52 UTC · Mar 10, 2026Vulnerability in the wildCVE-2025-26399CVE-2026-160360
SolarWinds Web Help Desk Exploited for RCE in MultiThe Hacker News·Mar 7, 07:03 UTC · Mar 7, 2026Vulnerability in the wildCVE-2025-40551CVE-2025-40536CVE-2025-26399+1 CVEs60
CISA Warns of Active Exploitation in SolarWinds Help Desk Software VulnerabilityThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2024Vulnerability in the wildCVE-2024-28987CVE-2024-2898660
SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE AttacksThe Hacker News·Sep 17, 04:34 UTC · Sep 17, 2024Vulnerability in the wildCVE-2024-28991CVE-2024-28990CVE-2024-45694+2 CVEs60
Microsoft Says Chinese Hackers Were Behind SolarWinds Serv-U SSH 0The Hacker News·Sep 6, 10:12 UTC · Sep 6, 2021Vulnerability in the wildCVE-2021-3521160
Another Critical RCE Flaw Discovered in SolarWinds Orion PlatformThe Hacker News·Mar 26, 05:07 UTC · Mar 26, 2021VulnerabilityCVE-2020-35856CVE-2021-3109CVE-2021-25274+1 CVEs60
Another critical SolarWinds Web Help Desk bug fixed (CVE-2024-28987)Help Net Security·Aug 23, 00:00 UTC · Aug 23, 2024Vulnerability in the wildCVE-2024-28987CVE-2024-2898660
SolarWinds Serv-U Vulnerability Under Active AttackThe Hacker News·Jun 21, 08:54 UTC · Jun 21, 2024Vulnerability in the wildCVE-2024-2899560
January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office ZeroRecorded Future·Feb 24, 00:00 UTC · Feb 24, 2026Vulnerability in the wildCVE-2026-21509CVE-2026-23760CVE-2026-1281+1 CVEs160