{"uuid": "5391dae2-e58b-4f47-9244-b4a0c192cbe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26399", "type": "seen", "source": "https://t.me/pphm_HackerNews/975", "content": "New Deserialization Vulnerability Bypasses Prior Patches in Web Help Desk\n\nSolarWinds has issued an urgent hotfix for a serious security flaw in its Web Help Desk (WHD) product: a remote code execution (RCE) vulnerability tracked as CVE-2025-26399, carrying a CVSS score of 9.8. This issue arises from an unauthenticated AjaxProxy deserialization weakness, which previously bypassed patches for related vulnerabilities. Organizations running exposed WHD instances are urged to apply the fix immediately.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:05.288150Z"}