SolarWinds Web Help Desk — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Active Exploitation of Vulnerabilities in Ivanti and SolarWinds Products

  The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding active exploitation of vulnerabilities in Ivanti Endpoint Manager, SolarWinds Web Help Desk, and VMware Workspace ONE. The…

  12 articles · Updated March 10, 2026
• Anubis Ransomware Attack Disrupts Adriatic Port Authority Operations

  The Anubis ransomware group launched a cyberattack on the Adriatic Port Authority, crippling operations and causing significant disruptions in maritime logistics. The attack, attributed to Anubis in January 2026,…

  8 articles · Updated June 15, 2026
• Critical Denial-of-Service Vulnerability in SolarWinds Web Help Desk

  SolarWinds Web Help Desk is vulnerable to a denial-of-service attack (CVE-2026-28299), which can crash the server due to insufficient memory. This vulnerability affects all versions of the software, including 2026.1 and…

  2 articles · Updated June 5, 2026
• Threat Actor Exploits Vulnerabilities to Abuse Elastic Cloud SIEM for Data Theft

  Cybersecurity researchers from Huntress have uncovered a campaign where a threat actor exploited multiple software vulnerabilities, including the SolarWinds Web Help Desk, to exfiltrate data to a free trial instance of…

  2 articles · Updated March 9, 2026
• Active Exploitation of SolarWinds Web Help Desk Vulnerability CVE-2025-40551

  Users of SolarWinds Web Help Desk are at risk due to the active exploitation of vulnerability CVE-2025-40551. This vulnerability was published on January 28, 2026, and was added to CISA's Known Exploited Vulnerabilities…

  76 articles · Updated February 5, 2026
• Critical Vulnerabilities in SolarWinds Serv-U Software Patched

  SolarWinds has issued security updates for four critical remote code execution vulnerabilities in its Serv-U software, which could allow attackers to gain root access to unpatched servers. The affected software is used…

  19 articles · Updated February 24, 2026
• CISA Adds New Vulnerabilities to Known Exploited Catalog

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including flaws in SolarWinds Web Help Desk, Notepad++,…

  75 articles · Updated February 13, 2026
• CISA Identifies Critical Vulnerabilities in SolarWinds, FreePBX, and GitLab

  The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical-severity vulnerability in SolarWinds Web Help Desk to its Known Exploited Vulnerabilities (KEV) Catalog. This update also includes…

  2 articles · Updated February 4, 2026

Recent Intelligence Reports

• The Anubis Ransomware Attack On The Adriatic Port Authority — www.resecurity.com · June 26, 2026
• Adriatic Port Cyber — Infosecurity-Magazine · June 15, 2026
• SolarWinds Web Help Desk Denial-of-Service Vulnerability (CVE-2026-28299) — www.solarwinds.com · June 5, 2026
• Attack warning for Ivanti Endpoint Manager, SolarWinds Web Help Desk and more — Heise.De · March 10, 2026
• US cyber agency warns of exploitation of three vulnerabilities, including SolarWinds and Ivanti bugs — Cyberdaily.Au · March 10, 2026
• Threat Actor Exploits Flaws and Uses Elastic Cloud SIEM to Manage Stolen Data — Infosecurity-Magazine · March 9, 2026
• Patch these 4 critical, make-me — Theregister · February 24, 2026
• U.S. CISA adds SolarWinds Web Help Desk, Notepad++, Microsoft Configuration Manager, and Apple devices flaws to its Known Exploited Vulnerabilities catalog — Securityaffairs.Co · February 13, 2026

Related Entities