CRITICALCVSS v3.1 9.8Actively exploited · CISA KEV since 2024-08-15Vulnerability

CVE-2024-28986

SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution.

Properties

Vulnerability name
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
Epss score
0.84628
Last seen
2026-10-19T12:00:27+00:00
Year
2024
Due date
2024-09-05
Exploited euvd since
2024-08-15T00:00:00+00:00
Source url
https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
Date added
2024-08-15
Score
9.8
Euvd base score version
3.1
Euvd vendor
SolarWinds
In Signal since
initial import (Sep 2026)
Euvd base score
9.8
Vendor project
SolarWinds
Content hash
02d0e644c2d8ecc4977ef0a7eef85e054e75080d4e28ad4196221b5c92dcc832
Published at
2024-08-13T23:15:16.627
Euvd updated
2025-10-21T22:55:47+00:00
Last modified
2026-06-17T07:22:12.443
Euvd epss pct
84.63
Epss percentile
0.99705

Related Entities (6)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2024-28986 (CVSS v3.1 9.8) — Ninja Signal Threat Intelligence | Ninja Signal