Description
SolarWinds Web Help Desk 反序列化漏洞 可致远程代码执行
SolarWinds Web Help Desk 反序列化漏洞 可致远程代码执行
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.anquanke.com/post/id/299182
https://www.tenablecloud.cn/plugins/nessus/209228
https://avd.aliyun.com/detail?id=AVD-2024-28986
https://cloud.tencent.com/developer/article/2549696
https://www.venustech.com.cn/new_type/aqtg/20241018/27973.html
https://cn-sec.com/archives/3286736.html
https://www.sentinelone.com/vulnerability-database/cve-2025-26399/
https://horizon3.ai/attack-research/cve-2025-40551-another-solarwinds-web-help-desk-deserialization-issue/
https://www.huntress.com/blog/active-exploitation-solarwinds-web-help-desk-cve-2025-26399
https://www.elastic.co/security-labs/solarwinds-whd-exploitation
https://www.ithome.com.tw/news/173757
https://www.sonicwall.com/blog/multiple-vulnerabilities-in-solarwinds-web-help-desk-leading-to-rce-cve-2025-40551
https://www.rapid7.com/blog/post/etr-multiple-critical-solarwinds-web-help-desk-vulnerabilities-cve-2025-40551-40552-40553-40554/
https://www.cve.org/CVERecord?id=CVE-2025-40551
https://www.163.com/dy/article/KKFIRB7B05118UGF.html
https://www.rescana.com/post/solarwinds-web-help-desk-critical-vulnerabilities-unauthenticated-rce-and-authentication-bypass-fix
https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28986
https://thehackernews.com/2026/01/solarwinds-fixes-four-critical-web-help.html
https://www.tenable.com/plugins/nessus/297225