PULSEUnderground Intel

LIVE45signals / 24h

FEED

ransomincransom reclama a Kyokuto Kaihatsu Kogyo · JP · Manufacturingransomnova reclama a Phi · Not Foundransomnova reclama a Digipro · Technologyransomnova reclama a Integrated Marketing Services · Business Servicesransomkrybit reclama a eitzchaim.com · IL · Not Foundransomkrybit reclama a formasuniversales.com · MX · Business Servicesransomkrybit reclama a rehabmalaysia.com · MY · Healthcareransomkrybit reclama a www.lagus.cz · CZ · Business Servicesransomgunra reclama a Dissinger and Dissinger Law Firm · US · Business Servicesransomplay reclama a Boston Electric and Telephone · US · Telecommunicationransomplay reclama a Wring Group · GB · Not Foundransomincransom reclama a asa-international.com · GB · Business Servicesransomplay reclama a AG Scholtes · NL · Manufacturingransomplay reclama a Andorra Life · AD · Healthcareransomincransom reclama a Kyokuto Kaihatsu Kogyo · JP · Manufacturingransomnova reclama a Phi · Not Foundransomnova reclama a Digipro · Technologyransomnova reclama a Integrated Marketing Services · Business Servicesransomkrybit reclama a eitzchaim.com · IL · Not Foundransomkrybit reclama a formasuniversales.com · MX · Business Servicesransomkrybit reclama a rehabmalaysia.com · MY · Healthcareransomkrybit reclama a www.lagus.cz · CZ · Business Servicesransomgunra reclama a Dissinger and Dissinger Law Firm · US · Business Servicesransomplay reclama a Boston Electric and Telephone · US · Telecommunicationransomplay reclama a Wring Group · GB · Not Foundransomincransom reclama a asa-international.com · GB · Business Servicesransomplay reclama a AG Scholtes · NL · Manufacturingransomplay reclama a Andorra Life · AD · Healthcare

CVE Watch—

CVE-2024-28986

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CVSS

—

No CVSS

EPSS

84.6%

p100

KEV

YES

Aug 15, 2024

Exploit Today

80

0-100

Published: — · Last modified: —

EPSS · 30d

84.6%EPSS · 30 days84.6%

2026-06-302026-07-16

KEV catalog record

Product

SolarWinds / Web Help Desk

Vulnerability

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

Added to KEV

Aug 15, 2024

Remediate by

Sep 5, 2024

Known ransomware use

No

Summary description

SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28986; https://nvd.nist.gov/vuln/detail/CVE-2024-28986

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2024-28987—

KEV—80SolarWinds Web Help Desk Hardcoded Credential Vulnerability—CVE-2025-26399—

KEV—80SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability—CVE-2025-40551—

KEV—80SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability—CVE-2025-40536—

KEV—80SolarWinds Web Help Desk Security Control Bypass Vulnerability—