SolarWinds Web Help Desk

Reported Context (4)

The company also released fixes for serious flaws in Web Help Desk and multiple Serv-U issues, including risks of privilege escalation, remote code execution, and administrator account creation. SolarWinds Patches Access Rights Manager Flaw Enabling Unauthenticated RCE
TL; DR Huntress discovered a threat actor was exploiting vulnerabilities (like SolarWinds Web Help Desk) and exfiltrating victim data to a free trial instance of Elastic Cloud SIEM. Huntress Traces Threat Actor’s Use of Elastic Cloud to Exfiltrate and Triage Victim Data
CISA flagged a critical SolarWinds Web Help Desk (WHD) vulnerability, CVE-2025-40551, that is now being exploited by unknown hackers. Threat Intelligence Roundup Covers Vishing, Zero-Day Exploits and Cybercrime Takedown
HomeBlogActive Exploitation of SolarWinds Web Help Desk Huntress Details Active Exploitation of SolarWinds Web Help Desk

CVE (12)

Malware (5)

People (6)

Threat Actors (7)

MITRE ATT&CK (12)

Vendors (7)

Products (18)

Tools (5)

Industries (10)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.