--- title: SolarWinds, again: Critical RCE bugs reopen old wounds... description: SolarWinds has disclosed six critical vulnerabilities in its Web Help Desk software, including four critical-rated remote code execution and authentication... canonical: https://daily.dev/posts/solarwinds-again-critical-rce-bugs-reopen-old-wounds-for-enterprise-security-teams-rwjuv9you twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: SolarWinds, again: Critical RCE bugs reopen old wounds for enterprise security teams | daily.dev og:description: SolarWinds has disclosed six critical vulnerabilities in its Web Help Desk software, including four critical-rated remote code execution and authentication... og:url: https://daily.dev/posts/solarwinds-again-critical-rce-bugs-reopen-old-wounds-for-enterprise-security-teams-rwjuv9you og:image: https://api.daily.dev/og/posts/rwjuv9YOU.png og:image:alt: SolarWinds, again: Critical RCE bugs reopen old wounds for enterprise security teams og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # SolarWinds, again: Critical RCE bugs reopen old wounds for enterprise security teams **[CSO Online](https://daily.dev/sources/csoonline)** · 5 min read · 0 upvotes · 0 comments ## Summary SolarWinds has disclosed six critical vulnerabilities in its Web Help Desk software, including four critical-rated remote code execution and authentication bypass flaws (CVE scores up to 9.8). The vulnerabilities allow attackers to bypass authentication, execute remote commands, and access restricted functionality without credentials. Security researchers from watchTowr and Horizon3.ai discovered the flaws, which are particularly concerning given WHD's history of active exploitation and SolarWinds' past security incidents. Organizations are urged to immediately upgrade to Web Help Desk 2026.1, as the deserialization and authentication logic flaws are highly reliable to exploit and could enable attackers to gain full system control and move laterally across networks. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [SolarWinds WHD Attacks Highlight Dangers of Exposed Apps](https://daily.dev/posts/solarwinds-whd-attacks-highlight-dangers-of-exposed-apps-z94gb1r3k) · Dark Reading · 0 upvotes · 0 comments - [Signature Optional - Analysis of CVE-2026-28323](https://daily.dev/posts/signature-optional---analysis-of-cve-2026-28323-w1dthyutu) · Sliver C2 Documentation · 0 upvotes · 0 comments - [CISA: Hackers now exploit SolarWinds Serv-U flaw to crash servers](https://daily.dev/posts/cisa-hackers-now-exploit-solarwinds-serv-u-flaw-to-crash-servers-yw8vsu17o) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#enterprise](https://daily.dev/tags/enterprise), [#vulnerability](https://daily.dev/tags/vulnerability) [View this post on daily.dev](https://daily.dev/posts/solarwinds-again-critical-rce-bugs-reopen-old-wounds-for-enterprise-security-teams-rwjuv9you) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"SolarWinds, again: Critical RCE bugs reopen old wounds for enterprise security teams","url":"https://daily.dev/posts/solarwinds-again-critical-rce-bugs-reopen-old-wounds-for-enterprise-security-teams-rwjuv9you","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/solarwinds-again-critical-rce-bugs-reopen-old-wounds-for-enterprise-security-teams-rwjuv9you"},"datePublished":"2026-01-29T03:16:01.836Z","dateModified":"2026-02-27T11:57:35.267Z","description":"SolarWinds has disclosed six critical vulnerabilities in its Web Help Desk software, including four critical-rated remote code execution and authentication...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/34a65f9adb112b07581d1acc11160975?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/34a65f9adb112b07581d1acc11160975?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"CSO Online","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"CSO Online","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/98667e4b5cac46cf9c470819c6cf71cd","url":"https://daily.dev/sources/csoonline"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/solarwinds-again-critical-rce-bugs-reopen-old-wounds-for-enterprise-security-teams-rwjuv9you","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,enterprise,vulnerability","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"CSO Online","item":"https://daily.dev/sources/csoonline"},{"@type":"ListItem","position":3,"name":"SolarWinds, again: Critical RCE bugs reopen old wounds for enterprise security teams"}]} ```