SERVER-WEBAPP SolarWinds Web Help Desk deserialization of untrusted data attempt

Description

Detects an attempt to exploit CVE-2025-40551, CVE-2024-28986, CVE-2024-28988, and CVE-2025-26399, an unsafe deserialization flaw that can allow code execution in SolarWinds Web Help Desk.

CVEs

CVE-2024-28986 CVE-2024-28988 CVE-2025-26399 CVE-2025-40551

Related blogs

Netskope BEAM: Open Source Detector for Supply Chain Compromise

August 7, 20257 min read

Netskope Threat Coverage: SUNBURST & FireEye Red Team (Offensive Security) Tools

December 15, 20202 min read

References

solarwinds.com
solarwinds.com
solarwinds.com
solarwinds.com