CVE-2026-28299

Description

SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

High

Affected products

SolarWinds / Web Help Desk2026.1 and all previous versions – 2026.1 and all previous versions

References

VENDOR_ADVISORYhttps://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28299
MISChttps://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-2_release_notes.htm