Research · Jan 28, 2026
Security Control Bypass Vulnerability Discovered in SolarWinds Web Help Desk
A critical security control bypass vulnerability has been identified in SolarWinds Web Help Desk, potentially allowing unauthorized access to restricted functionalities.
What changed
Recent findings have revealed a significant security control bypass vulnerability within SolarWinds Web Help Desk. This flaw could be exploited by unauthenticated attackers, granting them access to functionalities that should be restricted.
Who is affected
The vulnerability primarily impacts organizations utilizing SolarWinds Web Help Desk. This includes a variety of sectors that rely on this software for IT service management.
Potentially affected groups include IT departments, service desk teams, and organizations that prioritize customer support.
- SolarWinds Web Help Desk users
- IT service management teams
- Organizations in various sectors using SolarWinds products
What to do
Organizations using SolarWinds Web Help Desk should assess their current security measures and ensure they are updated to mitigate any risks associated with this vulnerability.
It is advisable to monitor for any unusual activity and apply necessary patches or updates as soon as they are available.