The Hacker NewsMar 7, 2026criticalSolarWinds Web Help Desk Exploited for RCE in MultiExploited7 min readcve-2025-40551cve-2025-405361
The Hacker NewsMar 2, 2026criticalSolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth BypassExploited4 min readcve-2025-40536cve-2025-405371
Help Net SecurityFeb 13, 2026criticalSolarWinds fixes critical Web Help Desk RCE vulnerabilities, upgrade ASAP!Exploited2 min readcve-2025-40536cve-2025-405371
Security AffairsFeb 9, 2026criticalAttackers abuse SolarWinds Web Help Desk to install Zoho agents and VelociraptorExploited3 min readcve-2025-40551cve-2025-263991
The Hacker NewsFeb 5, 2026criticalCISA Adds Actively Exploited SolarWinds Web Help Desk RCE to KEV CatalogExploited4 min readcve-2025-40551cve-2025-405363
Infosecurity MagazineFeb 4, 2026criticalSolarWinds Web Help Desk Vulnerability Actively ExploitedExploited2 min readcve-2025-40551cve-2025-405531
Security AffairsFeb 3, 2026highU.S. CISA adds SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab flaws to its Known Exploited Vulnerabilities catalogExploited3 min readcve-2019-19006cve-2021-399352
The RecordFeb 3, 2026criticalCISA orders federal agencies to patch exploited SolarWinds bug by FridayExploitedcve-2025-40551cve-2024-289861
Security AffairsFeb 2, 2026criticalSecurity Affairs newsletter Round 561 by Pierluigi PaganiniExploited4 min readcve-2026-24858cve-2025-405511
Security AffairsJan 29, 2026criticalSolarWinds addressed four critical Web Help Desk flaws3 min readcve-2025-40552cve-2025-405531