SolarWinds Web Help Desk: Update improves bypassable authentication
Summary
SolarWinds released Web Help Desk 2026.2.1 to patch several security flaws, including a critical authentication bypass issue tied to SAML 2.0 single sign-on. The update also fixes a high-severity denial-of-service vulnerability that could crash the application through low-memory conditions. SolarWinds says the release updates multiple third-party components, including pgAdmin4, to close additional vulnerabilities. The new version also removes REST API access, drops support for CentOS 6 and 7, requires macOS 13 or later, and switches WHD from Exchange Web Services to Microsoft Graph API.
AskAI Classifications
Sectors
No sectors detected
Functions
Developer and IT Infrastructure
IT Service Management (ITSM)
Application Management
Linked Companies
SolarWinds Worldwide LLC
$250M to $500M