<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: solarwinds-web-help-desk</title><description>Every new CVE for solarwinds-web-help-desk.</description><link>https://agentprime.io/</link><item><title>CVE-2026-28323: SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28323/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28323/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 15:55:29 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28299: SolarWinds Web Help Desk Denial-of-Service Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28299/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28299/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Jun 2026 19:31:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40554: SolarWinds Web Help Desk Authentication Bypass Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-40554/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40554/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.61 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Jan 2026 07:36:50 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-40553: SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-40553/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40553/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.68 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Jan 2026 07:35:41 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-40552: SolarWinds Web Help Desk Authentication Bypass Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-40552/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40552/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.52 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Jan 2026 07:34:37 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-40551: SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-40551/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40551/</guid><description>CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 3 Feb 2026: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.84 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Jan 2026 07:33:09 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2025-40537: SolarWinds Web Help Desk Hardcoded Credentials Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-40537/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40537/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Jan 2026 07:31:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40536: SolarWinds Web Help Desk Security Control Bypass Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-40536/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40536/</guid><description>CVSS 8.1 (High). Critical: In CISA’s KEV catalogue since 12 Feb 2026: it is known to be exploited. CVSS score 8.1 (7.0 or more) and EPSS 0.74 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Jan 2026 07:30:09 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2025-26399: SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-26399/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-26399/</guid><description>CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 9 Mar 2026: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.91 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Sep 2025 05:07:14 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2024-28988: SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-28988/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28988/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.42 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Sep 2025 21:18:58 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-26400: SolarWinds Web Help Desk XML External Entity Injection (XXE) Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-26400/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-26400/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Jul 2025 08:07:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-28989: SolarWinds Web Help Desk Cryptographic Key Management Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-28989/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28989/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Feb 2025 07:13:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-45709: SolarWinds Web Help Desk Local File Read Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-45709/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-45709/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Dec 2024 08:20:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-28987/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28987/</guid><description>CVSS 9.1 (Critical). Critical: In CISA’s KEV catalogue since 15 Oct 2024: it is known to be exploited. CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.93 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Aug 2024 21:17:23 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2024-28986: SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-28986/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28986/</guid><description>CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 15 Aug 2024: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.85 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Aug 2024 22:06:45 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2021-35251: Sensitive Data Disclosure Vulnerability</title><link>https://agentprime.io/advisories/CVE-2021-35251/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-35251/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Mar 2022 15:38:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-35232: Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries</title><link>https://agentprime.io/advisories/CVE-2021-35232/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-35232/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Dec 2021 18:48:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-35243: HTTP PUT &amp; DELETE Methods Enabled</title><link>https://agentprime.io/advisories/CVE-2021-35243/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-35243/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Dec 2021 19:48:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-32076: Access Restriction bypass vulnerability via referrer spoof - Business Logic Bypass</title><link>https://agentprime.io/advisories/CVE-2021-32076/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-32076/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Aug 2021 14:53:25 GMT</pubDate><category>CVE</category></item></channel></rss>