Ethical Hacking News
SolarWinds has released its third patch to address a critical Remote Code Execution (RCE) bug affecting its Web Help Desk platform, tracked as CVE-2025-26399. The patch is available for installation via the SolarWinds Customer Portal. Users are urged to take immediate action to secure their systems and prevent potential attacks. Stay ahead of emerging threats with ongoing security monitoring and patch management.
SolarWinds has released its third patch to address a Remote Code Execution (RCE) bug in its Web Help Desk (WHD) platform. The vulnerability, CVE-2025-26399, allows an unauthenticated attacker to run commands on the host machine, compromising sensitive data. The RCE bug is a patch bypass of previous vulnerabilities, including CVE-2024-28986 and CVE-2024-28988. The US Cybersecurity and Infrastructure Security Agency (CISA) had previously marked the original SolarWinds flaw as being leveraged in attacks. Users are urged to patch their systems immediately to prevent potential attacks, as there have been no public reports of threat actors exploiting this vulnerability. SolarWinds has released a hotfix that requires installing Web Help Desk version 12.8.7 and following specific steps to apply the security update.
SolarWinds, a renowned IT management company, has taken proactive measures to address a critical vulnerability affecting its Web Help Desk (WHD) platform. In a recent move, the company released its third patch in an effort to rectify a Remote Code Execution (RCE) bug that had been identified as a significant security concern.
According to Bill Toulas, tech writer and infosec news reporter with over a decade of experience working on various online publications, the vulnerability, tracked as CVE-2025-26399, has caused widespread alarm among users who rely on SolarWinds' WHD for IT support request tracking, workflow automation, asset management, and compliance assurance. The bug allows an unauthenticated attacker to run commands on the host machine, thereby compromising the integrity of sensitive data.
The vulnerability is a patch bypass of CVE-2024-28986, which in turn is a patch bypass of CVE-2024-28988. This complex chain of vulnerabilities has led to concerns among cybersecurity experts and users alike. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) had previously marked the original SolarWinds flaw as being leveraged in attacks and added it to the Known Exploited Vulnerabilities (KEV) catalog.
The new security problem was reported to SolarWinds through the Trend Micro Zero Day Initiative (ZDI). At the time of writing, there were no public reports about threat actors exploiting this vulnerability. However, given its critical nature, experts are urging users to take immediate action to patch their systems and prevent potential attacks.
SolarWinds has released a hotfix that addresses CVE-2025-26399, which requires installing Web Help Desk version 12.8.7. The vendor advises users to follow specific steps to apply the security update:
* Stop Web Help Desk
* Navigate to: /bin/webapps/helpdesk/WEB-INF/lib/ (substitute depending on OS)
* Back up and then delete: c3p0.jar
* Back up (to a separate directory): whd-core.jar, whd-web.jar, whd-persistence.jar
* Copy the hotfix-supplied JARs into the same /lib directory, overwriting the originals: whd-core.jar, whd-web.jar, whd-persistence.jar, plus add HikariCP.jar
* Restart Web Help Desk
The hotfix is exclusively available through the SolarWinds Customer Portal. More information on how to upgrade WHD can be found here.
It's worth noting that this vulnerability highlights the importance of ongoing security monitoring and patch management in today's digital landscape. As with any critical vulnerability, prompt action can make all the difference between a successful attack and a secure system.
Related Information:
https://www.ethicalhackingnews.com/articles/SolarWinds-Third-Patch-Offers-Hope-for-Vulnerability-Snarled-Web-Help-Desk-Users-ehn.shtml
https://www.bleepingcomputer.com/news/security/solarwinds-releases-third-patch-to-fix-web-help-desk-rce-bug/
Published: Tue Sep 23 11:12:49 2025 by llama3.2 3B Q4_K_M
