Active Exploitation of SolarWinds Web Help Desk (CVE-2025-26399)

T1Critical 95Covered by 1 source · first reported by Huntress at 08 Feb, 06:00 UTC

Huntress has observed active exploitation of a deserialization and remote code execution against the SolarWinds Web Help Desk software (CVE-2025-26399).

security

Sources

T1Active Exploitation of SolarWinds Web Help Desk (CVE-2025-26399)Huntress08 Feb, 06:00

Vulnerabilities

CVE-2025-26399

Why this score

Signals contributing to the severity score
Signal	Points
kev added	50
kev short fuse — 3 days to remediate	15
kev ransomware	10
public poc — 1 repositories	20