---
id: 7695
title: "CVE-2025-26399 SolarWinds Web Help Desk Overview and Takeaways"
cve: CVE-2025-26399
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/executive-blog/critical-vulnerability/cve-2025-26399-solarwinds-web-help-desk-overview-and-takeaways/"
published_at: "2026-03-10T00:00:00Z"
tags: ["rce", "deserialization", "patching", "solarwinds", "cisa-kev", "web-help-desk", "cve-2025-26399"]
phying_url: "https://phying.com/item/7695"
lang: en
---

# CVE-2025-26399 SolarWinds Web Help Desk Overview and Takeaways

## Summary

CVE-2025-26399 is a critical unauthenticated deserialization flaw (CVSS 9.8) in SolarWinds Web Help Desk, a patch bypass now actively exploited and listed in CISA's KEV catalog.

## Intelligence Metadata

- **Sources:** netspi.com
- **CVE:** CVE-2025-26399
- **Published:** 2026-03-10T00:00:00Z
- **Original:** https://www.netspi.com/blog/executive-blog/critical-vulnerability/cve-2025-26399-solarwinds-web-help-desk-overview-and-takeaways/
- **Phying News:** https://phying.com/item/7695