{"id":"CVE-2026-28299","published":"2026-06-02T19:31:56Z","modified":"2026-06-03T22:19:15Z","title":"SolarWinds Web Help Desk Denial-of-Service Vulnerability","vendor":"SolarWinds","product":"Web Help Desk","tier":"core","eol":null,"affectedVersions":[{"vendor":"SolarWinds","product":"Web Help Desk","versions":["2026.1 and all previous versions"]}],"description":{"text":"SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":{"score":8.2,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.0072,"percentile":0.53885,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":11,"pulses":[{"name":"Dark Caracal Reloaded: New Malware, Same Hunting Grounds","url":"https://otx.alienvault.com/pulse/6aa78a3264f244d220fb0674","created":"2026-09-14"},{"name":"Dark Caracal Reloaded: New Malware, Same Hunting Grounds","url":"https://otx.alienvault.com/pulse/6a901a11aa953b033920222a","created":"2026-08-27"},{"name":"Dark Caracal Reloaded: New Malware, Same Hunting Grounds","url":"https://otx.alienvault.com/pulse/6a8f1fe07f5ffb26e71db532","created":"2026-08-26"},{"name":"Known_Cve | Jun 11, 2026 | Part 1/2","url":"https://otx.alienvault.com/pulse/6a29742f499b656af9aa7453","created":"2026-06-10"},{"name":"Known_Cve | Jun 10, 2026 | Part 1/2","url":"https://otx.alienvault.com/pulse/6a281fe21ed2acb88f87d934","created":"2026-06-09"},{"name":"Known_Cve | Jun 9, 2026","url":"https://otx.alienvault.com/pulse/6a26ce49a35d1fcde6556d3b","created":"2026-06-08"},{"name":"Known_Cve | Jun 8, 2026","url":"https://otx.alienvault.com/pulse/6a257cd6c7aaeba76487b37a","created":"2026-06-07"},{"name":"Known_Cve | Jun 7, 2026","url":"https://otx.alienvault.com/pulse/6a242b862a9f3e11934390bd","created":"2026-06-06"},{"name":"Known_Cve | Jun 6, 2026 | Part 1/2","url":"https://otx.alienvault.com/pulse/6a22d9d836983549a180365a","created":"2026-06-05"},{"name":"Known_Cve | Jun 5, 2026 | Part 2/2","url":"https://otx.alienvault.com/pulse/6a2188a01aef9bc2efeb1a5c","created":"2026-06-04"}],"provenance":"machine"},"cwes":[{"id":"CWE-770","name":"Allocation of Resources Without Limits or Throttling"}],"references":[{"url":"https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28299","tags":["vendor-advisory"]},{"url":"https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-2_release_notes.htm","tags":["release-notes"]}],"techniques":[],"reports":[{"id":"SRC-785c287ab8311e1ba46a","title":"From Token Bingo to MAX Takeover: Kali365 Operator Expands Operation Across Microsoft Outlook, Okta, Xerox DocuShare, and Other Services","publisher":"arcticwolf.com","url":"https://arcticwolf.com/resources/blog/kali365-expands-into-aws-microsoft-okta-xerox-max-messenger/","date":"2026-06-02","mentions":[{"quote":"Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)August 6, 2026SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299August 3, 2026CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate PatchingVIEW ALLView All","start":5247,"end":5551}]},{"id":"SRC-6a06d5ec9ab99e8b6b36","title":"Token Bingo: Don't Let Your Code be the Winner","publisher":"arcticwolf.com","url":"https://arcticwolf.com/resources/blog/token-bingo-dont-let-your-code-be-the-winner/","date":"2026-04-24","mentions":[{"quote":"Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)August 6, 2026SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299August 3, 2026CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate PatchingVIEW ALLView All","start":5157,"end":5461}]},{"id":"SRC-876a8c22e3a8316f7dab","title":"Dropping Elephant APT Group Targets Turkish Defense Industry With New Campaign and Capabilities: LOLBAS, VLC Player, and Encrypted Shellcode","publisher":"arcticwolf.com","url":"https://arcticwolf.com/resources/blog/dropping-elephant-apt-group-targets-turkish-defense-industry/","date":"2025-07-23","mentions":[{"quote":"Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)August 6, 2026SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299August 3, 2026CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate PatchingVIEW ALLView All","start":5251,"end":5555}]},{"id":"SRC-4cf3172d190519e868ee","title":"Blog | Arctic Wolf","publisher":"arcticwolf.com","url":"https://arcticwolf.com/resources/blog/","date":null,"mentions":[{"quote":"Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)August 6, 2026SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299August 3, 2026CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate PatchingVIEW ALLView All","start":5115,"end":5419},{"quote":"SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299","start":8597,"end":8672}]},{"id":"SRC-1b0b8c4d77ff85ee9833","title":"Ending Cyber Risk with Aurora Endpoint Security","publisher":"arcticwolf.com","url":"https://arcticwolf.com/cylance/","date":null,"mentions":[{"quote":"Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)August 6, 2026SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299August 3, 2026CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate PatchingVIEW ALLView All","start":5158,"end":5462}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2026-34017","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34017","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2025-07-23","kind":"report","label":"Named in arcticwolf.com: Dropping Elephant APT Group Targets Turkish Defense Industry With New Campaign and Capabilitie…","url":"https://arcticwolf.com/resources/blog/dropping-elephant-apt-group-targets-turkish-defense-industry/","provenance":"machine"},{"date":"2026-04-24","kind":"report","label":"Named in arcticwolf.com: Token Bingo: Don't Let Your Code be the Winner","url":"https://arcticwolf.com/resources/blog/token-bingo-dont-let-your-code-be-the-winner/","provenance":"machine"},{"date":"2026-06-02","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2026-28299","provenance":"source"},{"date":"2026-06-02","kind":"report","label":"Named in arcticwolf.com: From Token Bingo to MAX Takeover: Kali365 Operator Expands Operation Across Microsoft Outlook,…","url":"https://arcticwolf.com/resources/blog/kali365-expands-into-aws-microsoft-okta-xerox-max-messenger/","provenance":"machine"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":29.0,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":10.78,"detail":"percentile 0.5389"},{"name":"Named in threat reports","points":10.0,"detail":"5 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":2.45,"detail":"11 pulses"},{"name":"CVSS severity","points":5.74,"detail":"base score 8.2"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}