Status: UPDATED | Advisory ID: CVE-2026-28299
| CVE | CVE-2026-28299 |
| CVSS Score / Version | 8.2 (High) / CVSS v3.1 |
| Updated | 2026-07-22 |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H |
| CVSS Prose | attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is low; availability impact is high. |
| Affected products | SolarWinds web_help_desk |
| Classified as | CWE-770 (Allocation of Resources Without Limits or Throttling) |
| Vendor | Product | Affected Versions | Patch Status |
|---|---|---|---|
| SolarWinds | web_help_desk |
| Subsystems | General OT |
| Sectors | Multiple |
SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.
Monitor SolarWinds's web page for any future patch releases. See vendor advisory link below.