web_help_desk: Improper Authentication (CVE-2026-28323)

Weakness-Klassen (CWE)

• CWE-287Class

  Improper Authentication

  When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

  cwe.mitre.org →

Re-Analyse & Statuswechsel

Chronologie der NVD-Audit-Events für diese CVE — Reanalyses, CVSS-Updates, CPE-Diffs.

1. Initial Analysis2026-08-17 19:10 UTC· nvd@nist.gov
   • CPE Configuration: OR *cpe:2.3:a:solarwinds:web_help_desk:*:*:*:*:*:*:*:* versions up to (excluding) 2026.2.1
   • Reference Type: SolarWinds: https://documentation.solarwinds.com/en/success_center/whd/content/helpdesksecureconfiguration.htm Types: Product
   • Reference Type: SolarWinds: https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-2-1_release_notes.htm Types: Release Notes, Vendor Advisory
   • Reference Type: SolarWinds: https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28323 Types: Vendor Advisory
2. CVE Modified2026-07-30 19:17 UTC· 134c704f-9b21-4f2e-91b3-4a467353bcc0
   • SSVC: {"id":"CVE-2026-28323","role":"CISA Coordinator","options":[{"exploitation":"none"},{"automatable":"yes"},{"technical…

Betroffene Produkte

Aus der Hersteller-/CERT-Meldung extrahierte Produkte und Versionsbereiche. Ein Version-Range wie „<4.14.6“ impliziert die Update-Empfehlung „auf 4.14.6 oder höher aktualisieren“.

• solarwinds

  web_help_desk2026.2.1

Quellen & Referenzen

• https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28323
  vendor-advisory
• https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-2-1_release_notes.htm
  release-notes
• https://documentation.solarwinds.com/en/success_center/whd/content/helpdesksecureconfiguration.htm
  x_secure-configuration-guide

Verknüpfte Empfehlungen

• sans-atrisk-mail2026-08-06 00:00 UTC
  @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30