---
id: "CVE-2024-28986"
kind: "vulnerability"
aliases: ["CVE-2024-28986"]
title: "SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability\u2026"
severity: "critical"
cvss: 9.8
epss: null
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "SolarWinds Web Help Desk", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "solarwinds web help desk", "fixed": [], "affected": "<= 12.8.2", "ecosystem": "vendor"}, {"name": "solarwinds web help desk", "fixed": [], "affected": "= 12.8.3", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "infrastructure", "self-hosted", "solarwinds", "web-help-desk"]
not_affected_if: ["unknown"]
published_at: "2024-08-13T23:15:16+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:05+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28986", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28986", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability…

SolarWinds Web Help Desk has a deserialization flaw that handles untrusted data unsafely. An attacker can send crafted input over the network to run code on the server.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:SolarWinds Web Help Desk affected ? fixed ?
- vendor:solarwinds web help desk affected <= 12.8.2 fixed ?
- vendor:solarwinds web help desk affected = 12.8.3 fixed ?

## Fix

Apply the mitigations from the vendor's instructions, or stop using the product if no mitigation exists (per CISA required action). Exact fixed version: unknown.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28986
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-28986

## From the sources

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. 

While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing.  

However, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_