CVE-2025-26399

CVSS

—

EPSS

0.895 (99.8th percentile)

CISA KEV

Added 2026-03-09, due 2026-03-12

Exploitation

No report

Public exploits

1 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 95Huntress08 Feb, 06:00

  Active Exploitation of SolarWinds Web Help Desk (CVE-2025-26399)

  Huntress has observed active exploitation of a deserialization and remote code execution against the SolarWinds Web Help Desk software (CVE-2025-26399).

  ↗huntress.com/blog/active-exploitation-solarwind…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:33poc publishedpoc-in-github
2. 24 Sept, 12:17poc publishedpoc-in-github
3. 24 Sept, 11:54poc publishedpoc-in-github
4. 24 Sept, 11:50kev addedcisa-kev