- 264/2026
- Critical
SolarWinds has released a security update to address a critical vulnerability affecting multiple versions of SolarWinds Web Help Desk.
The addressed vulnerability could allow the attacker to bypass security restrictions by exploiting SAML authentication on the affected systems when SAML 2.0 authentication is enabled.
The addressed vulnerability:
SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability (CVE-2026-28323):
- CVSS: 9.8
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Consequences: Bypass Security
Vulnerabilities
CVE-2026-28323
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.