SolarWinds Web Help Desk Exploited for RCE in Multi-Stage Attacks on Exposed Servers

🗓️ 09 Feb 2026 14:42:00Reported by The Hacker NewsType

Microsoft reports a multi-stage attack exploiting exposed SolarWinds Web Help Desk to achieve unauthenticated remote code execution.

Reporter	Title	Published	Views	Family All 96
GithubExploit	Exploit for Incorrect Default Permissions in Rapid7 Velociraptor	5 May 202619:48	–	githubexploit
GithubExploit	Exploit for CVE-2025-26399	23 Sep 202511:34	–	githubexploit
GithubExploit	Exploit for CVE-2025-40554	31 Jan 202608:17	–	githubexploit
ATTACKERKB	CVE-2025-40536	28 Jan 202607:30	–	attackerkb
ATTACKERKB	CVE-2025-40551	28 Jan 202607:33	–	attackerkb
BDU FSTEC	The vulnerability of the AjaxProxy component in SolarWinds IT infrastructure management software’s Web Help Desk allows a hacker to execute arbitrary commands.	24 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, related to a flaw in data protection mechanisms, allows attackers to enhance their privileges.	29 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the jabsorb library of the AjaxProxy service in the SolarWinds IT-infrastructure management software’s Web Help Desk allows a hacker to execute arbitrary code.	30 Jan 202600:00	–	bdu_fstec
Circl	CVE-2025-26399	23 Sep 202503:00	–	circl
Circl	CVE-2025-40536	28 Jan 202610:19	–	circl