VMware Flaw a Vector in SolarWinds Breach?Krebs on Security·Dec 20, 02:19 UTC · Dec 20, 2020VulnerabilityCVE-2020-400647
SolarWinds addressed critical RCEs in Access Rights ManagerSecurity Affairs·Feb 19, 07:48 UTC · Feb 19, 2024VulnerabilityCVE-2023-40057CVE-2024-23476CVE-2024-23477+4 CVEs60
CISA demands US govt agencies to update SolarWinds Orion softwareSecurity Affairs·Dec 30, 20:51 UTC · Dec 30, 2020VulnerabilityCVE-2020-1014847
3 New Severe Security Vulnerabilities Found In SolarWinds SoftwareThe Hacker News·Feb 5, 04:43 UTC · Feb 5, 2021VulnerabilityCVE-2021-25274CVE-2021-25275CVE-2021-2527647
SolarWinds issues patches for two new critical bugs found in Orion softwareCyberScoop·Feb 3, 13:12 UTC · Feb 3, 2021Vulnerability in the wild60
SolarWinds confirmes 18,000 customers may have been impactedSecurity Affairs·Mar 31, 08:45 UTC · Mar 31, 2021Vulnerability42
SolarWinds Patches 8 Critical Flaws in Access Rights Manager SoftwareThe Hacker News·Jul 20, 04:07 UTC · Jul 20, 2024Vulnerability in the wildCVE-2024-23472CVE-2024-28074CVE-2024-23469+6 CVEs60
SolarWinds addressed four critical Web Help Desk flawsSecurity Affairs·Jan 29, 19:17 UTC · Jan 29, 2026VulnerabilityCVE-2025-40552CVE-2025-40553CVE-2025-40554+3 CVEs60
SolarWinds Urges Upgrade After Revealing Critical RCE BugInfosecurity Magazine·Aug 15, 09:35 UTC · Aug 15, 2024VulnerabilityCVE-2024-2898660
RCE vulnerabilities fixed in SolarWinds enterprise solutionsHelp Net Security·Feb 19, 00:00 UTC · Feb 19, 2024VulnerabilityCVE-2024-23476CVE-2024-23479CVE-2024-23477+4 CVEs60
FBI, CISA, NSA Officially Blame Russia for SolarWinds Cyber AttackThe Hacker News·Jan 6, 07:17 UTC · Jan 6, 2021Vulnerability42
SolarWinds fixed three critical RCE flaws in its Access Rights Manager productSecurity Affairs·Oct 23, 11:52 UTC · Oct 23, 2023VulnerabilityCVE-2023-35182CVE-2023-35185CVE-2023-3518760
Former NSA and Cyber Command Chief Keith Alexander on SolarWinds, Cyberwar, and ChinaThe Record·Nov 17, 17:00 UTC · Nov 17, 2022Vulnerability30
SolarWinds breach has industrial firms checking their networks for vulnerabilitiesCyberScoop·Dec 16, 14:32 UTC · Dec 16, 2020Vulnerability in the wild60
Critical RCE bug in SolarWinds Web Help Desk fixed (CVE-2024-28986)Help Net Security·Aug 15, 00:00 UTC · Aug 15, 2024Vulnerability in the wildCVE-2024-2898660
SolarWinds addressed a critical RCE in all Web Help Desk versionsSecurity Affairs·Aug 14, 16:30 UTC · Aug 14, 2024VulnerabilityCVE-2024-2898660
SolarWinds warns of potential attacks against Web Help Desk instancesSecurity Affairs·Mar 17, 14:45 UTC · Mar 17, 2022Vulnerability30
Three More Vulnerabilities Found in SolarWinds ProductsInfosecurity Magazine·Feb 4, 11:35 UTC · Feb 4, 2021VulnerabilityCVE-2021-25274CVE-2021-25275CVE-2021-252760
SolarWinds: Our Office 365 Emails Were CompromisedInfosecurity Magazine·Dec 15, 09:50 UTC · Dec 15, 2020Vulnerability30
CISA orders federal agencies to patch exploited SolarWinds, Apple, Microsoft bugs within weeksThe Record·Feb 13, 14:58 UTC · Feb 13, 2026Vulnerability in the wildCVE-2025-40536CVE-2026-20700CVE-2025-14174+5 CVEs160
SolarWinds fixed critical RCE CVE-2024Security Affairs·Sep 16, 10:59 UTC · Sep 16, 2024VulnerabilityCVE-2024-28991CVE-2024-2899060
SolarWinds security chief: ‘We ran a pretty good shop’The Record·Mar 29, 17:36 UTC · Mar 29, 2023Vulnerability42
SolarWinds fixes severe Serv-U vulnerability (CVE-2024-28995)Help Net Security·Jun 8, 10:34 UTC · Jun 8, 2026Vulnerability in the wildCVE-2024-28995160
SolarWinds Serv-U hit by four critical RCE-level vulnerabilitiesHelp Net Security·Jun 8, 10:28 UTC · Jun 8, 2026Vulnerability in the wildCVE-2025-40538CVE-2025-40539CVE-2025-40540+1 CVEs60
SolarWinds Patches 4 Critical Serv-U 15.5 Flaws Allowing Root Code ExecutionThe Hacker News·Feb 25, 07:04 UTC · Feb 25, 2026Vulnerability in the wildCVE-2025-40538CVE-2025-40539CVE-2025-40540+4 CVEs60
SolarWinds Web Help Desk Vulnerability Actively ExploitedInfosecurity Magazine·Feb 4, 10:15 UTC · Feb 4, 2026Vulnerability in the wildCVE-2025-40551CVE-2025-40553CVE-2025-40552+1 CVEs60
CISA orders federal agencies to patch exploited SolarWinds bug by FridayThe Record·Feb 3, 20:59 UTC · Feb 3, 2026Vulnerability in the wildCVE-2025-40551CVE-2024-2898660
SolarWinds addressed three critical flaws in Serv-USecurity Affairs·Nov 21, 14:08 UTC · Nov 21, 2025VulnerabilityCVE-2025-40549CVE-2025-40548CVE-2025-4054760
SolarWinds fixed a critical RCE flaw in its Web Help Desk softwareSecurity Affairs·Sep 24, 11:50 UTC · Sep 24, 2025Vulnerability in the wildCVE-2025-26399CVE-2024-28988CVE-2024-2898660
SolarWinds Releases Patch for Critical Flaw in Web Help Desk SoftwareThe Hacker News·Aug 19, 05:04 UTC · Aug 19, 2024Vulnerability in the wildCVE-2024-28986CVE-2024-5914CVE-2024-5915+1 CVEs60
Automatically mitigate ProxyLogon, detect IoCs associated with SolarWinds attackers' activitiesHelp Net Security·Mar 19, 00:00 UTC · Mar 19, 2021VulnerabilityCVE-2021-26855CVE-2021-26857CVE-2021-26858+1 CVEs47
January 2021 Patch Tuesday forecast: New focus on security and software developmentHelp Net Security·Jan 26, 08:45 UTC · Jan 26, 2024Vulnerability42
CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318)Help Net Security·Jun 8, 00:00 UTC · Jun 8, 2026Vulnerability in the wildCVE-2026-28318CVE-2021-35211CVE-2021-35247+1 CVEs60
SolarWinds fixes critical Web Help Desk RCE vulnerability (CVE-2025-26399)Help Net Security·Mar 9, 17:22 UTC · Mar 9, 2026Vulnerability in the wildCVE-2025-26399CVE-2024-28988CVE-2024-2898660
Unpatched SolarWinds WHD instances under active attackHelp Net Security·Mar 9, 17:22 UTC · Mar 9, 2026Vulnerability in the wildCVE-2025-2639960
SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth BypassThe Hacker News·Mar 2, 06:04 UTC · Mar 2, 2026Vulnerability in the wildCVE-2025-40536CVE-2025-40537CVE-2025-40551+7 CVEs60
SolarWinds patches four critical ServSecurity Affairs·Feb 24, 20:07 UTC · Feb 24, 2026Vulnerability in the wildCVE-2025-40538CVE-2025-40540CVE-2025-40539+5 CVEs60
SolarWinds fixes critical Web Help Desk RCE vulnerabilities, upgrade ASAP!Help Net Security·Feb 13, 14:00 UTC · Feb 13, 2026Vulnerability in the wildCVE-2025-40536CVE-2025-40537CVE-2025-40551+5 CVEs60