SolarWinds warns over pre-auth RCE help desk bug

Expect this to get exploited - like the bug before it...

Sep 23, 2025 1:32 PM 1 min read

SolarWinds warns over pre-auth RCE help desk bug — It's whac-a-mole over at SolarWinds... Credit: https://unsplash.com/@laralone

SolarWinds says its web help desk software can be remotely exploited by an unauthenticated attacker – issuing a critical CVSS 9.8 alert for a new vulnerability, CVE-2025-26399; a bypass of a previously exploited bug.

“This vulnerability is a patch bypass of CVE-2024-28988, which in turn is a patch bypass of CVE-2024-28986,” Solarwinds admitted today.

This content is for members only

Already have an account? Sign in

Add The Stack on Google

Edward Targett

Ed is a co-founder of The Stack. He previously edited Computer Business Review. He has also covered energy markets. He started his journalism career on local papers. He left school at 15 and has made a living asking "but why?" ever since.