Skip to main content
Cyber Retaliator Solutions
Cyber RetaliatorSolutions
All vulnerabilities
CVE-2024-28986

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

SolarWinds — Web Help Desk

Added to KEV catalog
15 August 2024
Federal remediation due date
5 September 2024
Weakness classification (CWE)
CWE-502

CISA Description

SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28986; https://nvd.nist.gov/vuln/detail/CVE-2024-28986

View on NVD View on MITRE CVE View full CISA catalog

More SolarWinds Vulnerabilities

CVE-2026-28318

SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

CVE-2025-26399

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CVE-2025-40536

SolarWinds Web Help Desk Security Control Bypass Vulnerability

CVE-2025-40551

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CVE-2024-28987

SolarWinds Web Help Desk Hardcoded Credential Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services