CVE-2024-28988

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

January 28, 2026

Last Seen

February 25, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Active Exploitation of SolarWinds Web Help Desk Vulnerability CVE-2025-4055159.2

Users of SolarWinds Web Help Desk are at risk due to the active exploitation of vulnerability CVE-2025-40551. This vulnerability was published on January 28, 2026, and was added to CISA's Known Exploited Vulnerabilities Catalog on February 3, 2026, requiring federal civilian agencies to implement pa...

SolarWinds Web Help Desk Pre-Auth RCE Vulnerability Disclosed48.7

CVE-2024-28988 is a pre-auth deserialization remote code execution vulnerability in SolarWinds Web Help Desk. It was reported through the Zero Day Initiative and disclosed in October 2024, but remained unpatched until September 2025, affecting users of the software. The vulnerability allows unauthor...