Multiple vulnerabilities fixed in SolarWinds Web Help Desk (heise.de)
0xBASE INTEL BRIEF
- High-severity DoS vulnerability CVE-2026-28299 in SolarWinds Web Help Desk
- Critical RCE vulnerability CVE-2025-12762 in pgAdmin4 component
- Patch released in version 2026.2, upgrade via 2026.1 required
"SolarWinds released version 2026.2 of its Web Help Desk, fixing several security vulnerabilities. A high-severity flaw (CVE-2026-28299) can cause denial-of-service. A critical vulnerability (CVE-2025-12762) in pgAdmin4 allows remote code execution. TLS settings have been tightened and bugs fixed. A direct patch is available; an upgrade via version 2026.1 is recommended."
no comments yet.