sign in--:--:--UTC

CVE-2025-26399

exploited in the wild☆ pin

CVSS

—

Reports

5

First seen

Feb 8, 2026

Last seen

Apr 16, 2026

Affected product

SolarWinds Web Help Desk

Associated actors

APT28 ×1 Diesel Vortex ×1 GOLD ENCOUNTER ×1 GrayBravo ×1 Interlock Ransomware Group ×1 Lotus Blossom ×1 Mercenary Akula ×1 Qilin ×1 Russia ×1 Salt Typhoon ×1 Storm-1516 ×1 TGR-STA-1030 ×1 UNC2814 ×1 UNC3886 ×1 UNC6201 ×1

Recent reports

QEMU abused to evade detection and enable ransomware delivery

Sophos NewsApr 16, 2026 Critical

March 2026 CVE Landscape: 31 High-Impact Vulnerabilities, Interlock Ransomware Exploits Cisco FMC Zero-Day

Recorded Future InsiktApr 13, 2026 High

CERT-EU Cyber Brief February 2026: APT28, China espionage, AI supply-chain attacks, Qilin ransomware

CERT-EU Threat IntelMar 2, 2026 Medium

Risky Business #824 — Microsoft's Secure Future is looking a bit wobbly

Risky BusinessFeb 11, 2026 Critical

Active Exploitation of SolarWinds Web Help Desk (CVE-2025-26399)

Huntress BlogFeb 8, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans