SolarWinds has issued its third security patch to address a critical remote code execution (RCE) vulnerability in its Web Help Desk software. This vulnerability, identified as CVE-2023-35078, allows attackers to execute arbitrary code on affected systems, posing significant risks to organizations using this popular IT service management tool. The Web Help Desk RCE flaw was initially discovered and reported by security researchers, prompting SolarWinds to release multiple patches to mitigate the threat. Despite previous updates, the persistence of the vulnerability necessitated a third patch to ensure comprehensive protection. This latest update underscores the importance of timely patch management and vigilance in cybersecurity practices. Organizations are strongly advised to apply the patch immediately to prevent exploitation by threat actors who could leverage this vulnerability to gain unauthorized access, disrupt services, or deploy malware. SolarWinds continues to monitor the situation and collaborate with cybersecurity experts to enhance the security posture of its products. This incident highlights the ongoing challenges in securing complex software environments and the critical role of proactive vulnerability management in safeguarding digital infrastructure.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Tue, 23 Sep 2025 13:45:18 +0000