Firetruck

CVE-2025-26399

KEV · Ransomware
Updated Aug 4, 2026 · PUBLISHED
View KEV entry →

Description

SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Web Help DeskSolarWinds / Web Help Desk12.8.7 and belowaffected