AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SolarWindsCVE-2026-28323

SolarWinds Web Help Desk: authentication bypass

SolarWinds

CVE-2026-28323 · Published Jul 30, 2026 · updated Aug 17, 2026

Critical9.8
No fix yet
SolarWinds advisory

SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.

Affected versions

PackageAffectedFixed in
Web Help Desk
Product
<= 2026.1 and all previous versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-287

More SolarWinds advisories

All SolarWinds
Critical 9.1Jul 21SolarWinds Serv-U: insecure direct object referenceCVE-2026-28317no fix yetCritical 9.1Jul 21SolarWinds Serv-U: improper access controlCVE-2026-28321no fix yetCritical 9.1Jul 21SolarWinds Serv-U: privilege escalationCVE-2026-28312no fix yetCritical 9.1Jul 21SolarWinds Serv-U: insecure direct object referenceCVE-2026-28313no fix yetCritical 9.1Jul 21SolarWinds Serv-U: insecure direct object referenceCVE-2026-28314no fix yetMedium 6.2Jul 21SolarWinds Serv-U: cross-site scriptingCVE-2026-28315no fix yet