CVE-2026-28323

Awaiting Analysis Awaiting Analysis - Queue

SAML Authentication Bypass in SolarWinds Web Help Desk

Publication date: 2026-07-30

Last updated on: 2026-07-30

Assigner: SolarWinds

Description

SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-07-30

Generated

2026-07-31

AI Q&A

2026-07-31

EPSS Evaluated

N/A

NVD

CVE-2026-28323

EUVD

EUVD-2026-51182

Affected Vendors & Products

Vendor	Product	Version / Range
solarwinds	web_help_desk	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

SolarWinds Web Help Desk has a SAML authentication bypass vulnerability. This flaw allows attackers to bypass authentication when SAML 2.0 is enabled, potentially granting unauthorized access to the system.

Detection Guidance

Check if SolarWinds Web Help Desk has SAML 2.0 authentication enabled. Review logs for unusual SAML authentication attempts or bypasses. No specific commands are provided in the context.

Impact Analysis

This vulnerability could allow attackers to gain full control of the Web Help Desk system, leading to unauthorized access, data theft, or system manipulation. The high CVSS score indicates severe potential impact.

Compliance Impact

This vulnerability allows unauthorized access to sensitive data due to SAML authentication bypass, which could lead to violations of GDPR (data protection) and HIPAA (health information security) by exposing confidential information.

Mitigation Strategies

Disable SAML 2.0 authentication in SolarWinds Web Help Desk if enabled. Apply patches or updates from SolarWinds if available. Monitor for unauthorized access or suspicious activity.

Hi! I’m here to help you understand CVE-2026-28323. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70