●
CVE-2026-75094 COMFAST CF-N1-S CGI mbox-config sub_44B438 os command inject
●
CVE-2026-75093 sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_al
●
CVE-2026-75090 EricLBuehler Mistral.rs GGUF Tokenizer gguf_tokenizer.rs con
●
CVE-2026-75089 PHPGurukul Complaint Management System check_availability.ph
●
CVE-2026-75088 itsourcecode Hospital Management System viewbilling.php sql
●
CVE-2026-75087 itsourcecode Hospital Management System viewdepartment.php s
●
CVE-2026-75086 itsourcecode Hospital Management System viewroom.php sql inj
●
CVE-2026-75082 Webkul Bagisto Customer-Registration Notification Email regi
●
CVE-2026-75081 Webkul Bagisto store behavioral workflow
●
CVE-2026-75080 SourceCodester Class and Exam Timetabling System edit_subjec
News

SOLARWINDS CRITICAL VULNERABILITY ALERT

Giulio Saggin
Giulio Saggin
Wednesday 24 September 2025
SOLARWINDS CRITICAL VULNERABILITY ALERT
SecAlerts

SolarWinds has released hot fixes for a critical CVSS 9.8 security vulnerability affecting its Web Help Desk 12.8.7 and all previous versions. The flaw could allow attackers to execute arbitrary commands on susceptible systems if successfully exploited.

There is currently no evidence of exploitation in the wild for the vulnerability. However, experts warn that history suggests attackers may soon target it and users are urged to upgrade to Web Help Desk 12.8.7 HF1 immediately.

Information for this vulnerability can be found on SecAlerts: CVE-2025-26399

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Top Stories

Features

What is PCI DSS Requirement 6.1?

What is PCI DSS Requirement 6.1?

There are 12 PCI DSS Requirements that need to be met to attain PCI compliance. One of those, Requirement 6, ensures that an entity has its software protected by up-to-date "vendor-provided security patches".

What is PCI DSS Requirement 6?

What is PCI DSS Requirement 6?

The official explanation of PCI DSS Requirement 6 is summed up as "Develop and maintain secure systems and applications". In other words, an entity attaining PCI compliance needs to have its software protected by up-to-date "vendor-provided security patches".

What is an Approved Scanning Vendor (ASV)?

What is an Approved Scanning Vendor (ASV)?

Discover the Complexities Behind PCI Compliance: Unraveling the Critical Role of External Scans, Internal Vulnerability Checks, and the Cruciality of Requirement 6.1 in Cybersecurity. Explore how ASVs and Services like SecAlerts Play Key Roles in This Compliance Puzzle!

What is a zero-day?

What is a zero-day?

A zero-day refers to a vulnerability in software or hardware that is unknown to the vendor or the public. It's called "zero-day" because once it's discovered, attackers can exploit it immediately, leaving zero days for the vendor to fix it.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203