Product:
Web Help Desk
Summary
SolarWinds Web Help Desk is vulnerable to an unauthenticated AjaxProxy deserialization remote code execution vulnerability. If exploited, this vulnerability allows an attacker to execute commands on the host machine. It is a patch bypass of CVE-2024-28988, which is also a patch bypass of CVE-2024-28986.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2025-26399 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted requests to the Web Help Desk application. By manipulating the AjaxProxy deserialization process, the attacker can execute arbitrary commands on the server without authentication. This can lead to full control over the affected system, allowing the attacker to perform malicious actions.
Affected Products
- Web Help Desk: Affected by the deserialization vulnerability allowing remote code execution.
Mitigation
To mitigate this vulnerability, users should apply the latest patches provided by SolarWinds. It is also recommended to review security configurations and limit access to the Web Help Desk application to trusted networks only. Regularly updating software and monitoring for unusual activity can further enhance security.