SOLARWINDS FIXES WEB HELP DESK PATCH BYPASS FOR ACTIVELY EXPLOITED FLAW — AGAIN

Summary from the TLDR InfoSec newsletter

SolarWinds issued a third patch for the critical Java deserialization vulnerability in Web Help Desk, CVE-2025-26399 bypasses CVE-2024-28988, which bypassed the original CVE-2024-28986 flaw. This CVE affects the AjaxProxy component, allowing unauthenticated remote code execution. Trend Micro researchers found each patch bypass. Experts warn that patch bypasses are common with blacklist approaches and predict that this could be exploited, given its history of active exploitation.