CVE-2026-28323

SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://documentation.solarwinds.com/en/success_center/whd/content/helpdesksecureconfiguration.htm	Product
https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-2-1_release_notes.htm	Release Notes Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28323	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:solarwinds:web_help_desk:*:*:*:*:*:*:*:*

History

23 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) Se ha descubierto que SolarWinds Web Help Desk está afectado por una vulnerabilidad de omisión de autenticación SAML. Esto requiere que el método de autenticación SAML 2.0 esté habilitado.

Information

Published : 2026-07-30 16:17

Updated : 2026-10-23 22:10

NVD link : CVE-2026-28323

Mitre link : CVE-2026-28323

CVE.ORG link : CVE-2026-28323

JSON object : View

Products Affected

solarwinds

web_help_desk

CWE

CWE-287

Improper Authentication

{"id": "CVE-2026-28323", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-28323", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-30T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@solarwinds.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@solarwinds.com", "affectedData": [{"vendor": "SolarWinds", "product": "Web Help Desk", "versions": [{"status": "affected", "version": "2026.1 and all previous versions"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-30T16:17:10.710", "references": [{"url": "https://documentation.solarwinds.com/en/success_center/whd/content/helpdesksecureconfiguration.htm", "tags": ["Product"], "source": "psirt@solarwinds.com"}, {"url": "https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-2-1_release_notes.htm", "tags": ["Release Notes", "Vendor Advisory"], "source": "psirt@solarwinds.com"}, {"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28323", "tags": ["Vendor Advisory"], "source": "psirt@solarwinds.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@solarwinds.com", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled."}, {"lang": "es", "value": "Se ha descubierto que SolarWinds Web Help Desk est\u00e1 afectado por una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n SAML. Esto requiere que el m\u00e9todo de autenticaci\u00f3n SAML 2.0 est\u00e9 habilitado."}], "lastModified": "2026-10-23T22:10:00.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:solarwinds:web_help_desk:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B5440A5-AE49-4158-AA70-865758E8AFB4", "versionEndExcluding": "2026.2.1"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@solarwinds.com"}