The vulnerability, tracked as CVE-2025-26399 (CVSS score: 9.8), has been described as an instance of deserialization of ...

Third time’s the charm?’ asks a prominent security researcher after what appears to be the same critical Java deserialization ...

Then in October 2024, SolarWinds disclosed and tried to patch CVE-2024-28988, another 9.8-rated Web Help Desk Java ...

A newly-uncovered RCE flaw in SolarWinds' helpdesk product bypasses two previously-issued fixes, and users should prioritise ...

Exploitation of the latest patch bypass vulnerability is “only a matter of time”, according to one security expert.