SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine…

SolarWinds Web Help Desk contains a critical deserialization of untrusted data vulnerability in the AjaxProxy component (CVE-2025-26399). This vulnerability could allow an attacker to execute arbitrary commands on the host machine. The issue affects the Web Help Desk application and has been addressed in version 12.8.7 hotfix-1. Given SolarWinds' history as a high-profile target and the remote code execution potential, this vulnerability poses significant risk to organizations using the affected software. Organizations should prioritize patching to the latest version to mitigate potential exploitation.