SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
SolarWinds · Web Help Desk
Date added (CISA)
2026-03-09
Remediation due
2026-03-12
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine.