PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Signature Optional - Analysis of CVE-2026-28323

bishopfox.com | vulnerability | CVE-2026-28323 | #solarwinds | #vulnerability-analysis | #patch-analysis | #saml | #auth-bypass | #cve-2026-28323 | #web-help-desk
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CVE-2026-28323 is a CVSS 9.8 SAML auth bypass in SolarWinds Web Help Desk. A single forged POST request grants unauthenticated access to any valid account.
CVE
CVE-2026-28323
Published
Collected

Related coverage

vulnerability · netspi.com
CVE-2025-26399 SolarWinds Web Help Desk Overview and Takeaways
CVE-2025-26399 is a critical unauthenticated deserialization flaw (CVSS 9.8) in SolarWinds Web Help Desk, a patch bypass now actively exploited and listed in CISA's KEV catalog.
vulnerability · netspi.com
CVE-2024-28989: Weak Encryption Key Management in Solar Winds Web Help Desk
CVE-2024-28989: SolarWinds Web Help Desk uses predictable AES-GCM keys—some static, some from a restricted keyspace—so an attacker with a backup file can recover stored passwords. Fixed in 12.8.5.
vulnerability · blog.viettelcybersecurity.com
CVE-2022-47966 SAML ShowStopper
Viettel dissects CVE-2022-47966: legacy xmlsec in ManageEngine products runs XSLT transforms during SAML signature verification, so a crafted SAMLResponse can trigger unauthenticated RCE.
vulnerability · blog.viettelcybersecurity.com
CVE-2022-21587 (Oracle E-Business Suite Unauthenticated RCE)
A walkthrough of CVE-2022-21587, unauthenticated RCE (CVSS 9.8) in Oracle EBS Web Applications Desktop Integrator's upload component, covering lab setup, EBS architecture and the vulnerable path.
blog · bugcrowd.com
How to secure and build trust in your APIs through Savant Probe
# How to secure and build trust in your APIs through Savant Probe October 6, 2026 | By Erica Azad Back to blog ## Key takeaways * Savant Probe is a runtime API security testing tool that...
research · slcyber.io
Solarwinds Web Help Desk: When the Helpdesk is too Helpful
Hardcoded credentials and arbitrary HQL evaluation in SolarWinds Web Help Desk chain to unauthenticated RCE.
Back