---
id: 7514
title: "Signature Optional - Analysis of CVE-2026-28323"
cve: CVE-2026-28323
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/signature-optional-analysis-of-cve-2026-28323"
published_at: "2026-08-26T00:00:00Z"
tags: ["solarwinds", "vulnerability-analysis", "patch-analysis", "saml", "auth-bypass", "cve-2026-28323", "web-help-desk"]
phying_url: "https://phying.com/item/7514"
lang: en
---

# Signature Optional - Analysis of CVE-2026-28323

## Summary

CVE-2026-28323 is a CVSS 9.8 SAML auth bypass in SolarWinds Web Help Desk. A single forged POST request grants unauthenticated access to any valid account.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2026-28323
- **Published:** 2026-08-26T00:00:00Z
- **Original:** https://bishopfox.com/blog/signature-optional-analysis-of-cve-2026-28323
- **Phying News:** https://phying.com/item/7514