CVE-2026-28323

criticalCVSS 9.8covered by 4 sourcesfirst seen 2026-07-30

Serial number: AV26-766 Date: July 30, 2026 As of July 30, 2026, SolarWinds is affected by a vulnerability in the following product: Web Help Desk (WHD) Prior to 2026.2.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. WHD 2026.2.1 release notes SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability (CVE-2026-28323) SolarWinds Security Vulnerabilities

⚡ Watch CVE-2026-28323

Get an email if CVE-2026-28323 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.64% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 47% of all EPSS-scored CVEs.

Advisory coverage (4)

unknownSolarWinds security advisory (AV26-766)cccs · 2026-07-31
unknownNCSC-2026-0274 [1.00] [M/H] Kwetsbaarheid verholpen in SolarWinds Web Help Deskncsc-nl · 2026-07-31
high[NEU] [hoch] SolarWinds Web Help Desk: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungencert-bund · 2026-07-31
criticalCVE-2026-28323: SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability…nvd · 2026-07-30

External references

NVD record for CVE-2026-28323

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-28323 status](https://www.csirts.com/badge/CVE-2026-28323)](https://www.csirts.com/cve/CVE-2026-28323)