{"vulnerability": "CVE-2026-28323", "sightings": [{"uuid": "97de6d7d-6547-4cfb-8aec-91b840195a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mruvtcjthk2z", "content": "CVE-2026-28323 - web help desk\nIf enabled, a vulnerability in SolarWinds Web Help Desk could allow unauthorized access to the system. This means that someone might be able to access the system without needing a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#solarwinds #CVE #infosec", "creation_timestamp": "2026-07-30T16:56:04.516434Z"}, {"uuid": "5ab2adce-befe-4fab-994d-3a85d1338711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrvx7w6dy72z", "content": "A SolarWinds Web Help Desk SAML authentication bypass, CVE-2026-28323, scores a critical CVSS 9.8. Update to 2026.2.1 to stay protected.\n\n#SolarWinds #WebHelpDesk #CVE202628323 #SAML #InfoSec", "creation_timestamp": "2026-07-31T02:53:42.278462Z"}, {"uuid": "c2e4b598-dc82-4f5b-9a6e-e9810d8d9a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3muaoaxc25z23", "content": "~Arcticwolf~\nUnauthenticated WHD flaws enable session bypass and DoS; patch to 2026.2.1.\n-\nIOCs: CVE-2026-28323, CVE-2026-28299\n-\n#CVE202628299 #CVE202628323 #ThreatIntel", "creation_timestamp": "2026-08-29T20:02:53.038101Z"}, {"uuid": "7423debb-b5dd-4ec6-8708-0e73eaec4cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-766", "content": "", "creation_timestamp": "2026-07-31T16:45:13.561971Z"}, {"uuid": "9e695ca3-b93f-492f-8a7b-d4d5f16c194a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheid-in-solarwinds-web-help-desk-update-nu", "content": "", "creation_timestamp": "2026-07-31T16:45:18.337606Z"}, {"uuid": "60465d0e-5e01-4f2b-8455-58871f3c2296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3msk4dqxqxl2d", "content": "The latest update for #ArcticWolf includes \"SolarWinds Web #HelpDesk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299\" and \"Payroll Pirates: Strange New Tides in Business Email Compromise\".\n \n#cybersecurity #infosec #networks https://opsmtrs.com/2ZFbaTl", "creation_timestamp": "2026-08-08T03:18:33.574982Z"}, {"uuid": "ce3a306f-d056-4b39-b2ae-fb725c782936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3msrmyjzble2u", "content": "The latest update for #ArcticWolf includes \"Active #SupplyChain Attack on npm Packages (keyv, cacheable): Immediate Mitigation Required\" and \"SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299\".\n \n#cybersecurity #infosec #networks https://opsmtrs.com/2ZFbaTl", "creation_timestamp": "2026-08-11T03:05:09.105869Z"}, {"uuid": "e71b1eec-db37-4ceb-9046-4860a382c51b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-28323", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117055370733606045", "content": "This post is from yesterday.\nNote: Arctic Wolf will sell your data without consent. you need to scroll to the bottom and opt out of being sold to unscrupulous third-parties. \nArctic Wolf: SolarWinds Web Help Desk Vulnerabilities: CVE-2026-28323 and CVE-2026-28299 https://arcticwolf.com/resources/blog/cve-2026-28323-and-cve-2026-28299/ #infosec #vulnerability #privacy", "creation_timestamp": "2026-08-07T17:20:12.088822Z"}, {"uuid": "97e2e348-ed36-4610-b2ff-a7b25399cab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28323", "type": "seen", "source": "Telegram/bPFyihRaKzYFH468IH6VZ8obvtNAU0Sx5WI3sylwbu3LVzU", "content": "", "creation_timestamp": "2026-09-04T05:00:05.576010Z"}, {"uuid": "048abe21-27f6-4271-9cd8-cdbd2c875b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28323", "type": "published-proof-of-concept", "source": "Telegram/bPFyihRaKzYFH468IH6VZ8obvtNAU0Sx5WI3sylwbu3LVzU", "content": "", "creation_timestamp": "2026-09-05T01:00:37.513673Z"}]}