Buy A Help Desk, Bundle A Remote Access Solution? (SolarWinds Web Help Desk Pre

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SolarWinds Web Help Desk Pre-Auth RCE Vulnerability Disclosed CVE-2024-28988 is a pre-auth deserialization remote code execution vulnerability in SolarWinds Web Help Desk. It was reported through the Zero Day Initiative and disclosed in October 2024, but remained unpatched until September 2025, affecting users of the software. The vulnerability allows unauthorized access to systems using the affected software. 2 sources 49