SolarWinds Web Help Desk Denial-of-Service Vulnerability (CVE-2026-28299)

www.solarwinds.com • June 5, 2026

SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.

SolarWinds Web Help Desk 2026.1 and all versions

SolarWinds Web Help Desk 2026.2

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Denial-of-Service Vulnerability in SolarWinds Web Help Desk SolarWinds Web Help Desk is vulnerable to a denial-of-service attack (CVE-2026-28299), which can crash the server due to insufficient memory. This vulnerability affects all versions of the software, including 2026.1 and 2026.2. Additionally, there are critical vulnerabilities (CVE-2025-12762, CVE-2025-12763, CVE-2025-12765) that allow for code execution and TLS certificate verification bypass. As of now, there are no reports of active exploitation, but users are advised to upgrade to version 2026.2 to mitigate risks. The developers have implemented fixes and improved security measures in the latest version. The vulnerabilities were publicly disclosed on June 2, 2026, and the developers have provided guidance for users on upgrading. The overall impact could disrupt IT support services across affected organizations. 2 sources 69

Extracted Entities

SolarWinds Web Help Desk Denial-of-Service Vulnerability (CVE-2026-28299)

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)