Sakshi Sharma’s Post

SolarWinds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw SolarWinds has released hot fixes to address a critical security flaw impacting its Web Help Desk software that, if successfully exploited, could allow attackers to execute arbitrary commands on susceptible systems. The vulnerability, tracked as CVE-2025-26399 (CVSS score: 9.8), has been described as an instance of deserialization of untrusted data that could result in code execution. It affects SolarWinds Web Help Desk 12.8.7 and all previous versions. "SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine," SolarWinds said in an advisory released on September 17, 2025. https://lnkd.in/g-GwJrDf Please follow Sakshi Sharma for such content. #DevSecOps, #CyberSecurity, #DevOps, #SecOps, #SecurityAutomation, #ContinuousSecurity, #SecurityByDesign, #ThreatDetection, #CloudSecurity, #ApplicationSecurity, #DevSecOpsCulture, #InfrastructureAsCode, #SecurityTesting, #RiskManagement, #ComplianceAutomation, #SecureSoftwareDevelopment, #SecureCoding, #SecurityIntegration, #SecurityInnovation, #IncidentResponse, #VulnerabilityManagement, #DataPrivacy, #ZeroTrustSecurity, #CICDSecurity, #SecurityOps