CVE-2024-28986

Summary

CVE-2024-28986 is a Java Deserialization Remote Code Execution vulnerability affecting SolarWinds Web Help Desk. If exploited, an attacker could gain control of the host machine. Although initially reported as an unauthenticated vulnerability, SolarWinds has not been able to reproduce it without authentication. As a precautionary measure, SolarWinds urges all Web Help Desk customers to install the available patch to mitigate potential risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.