SolarWinds Web Help Desk RCE Exploited in Multi-Stage Enterprise Attacks on Exposed Servers

According to Microsoft & Huntress, threat actors are actively exploiting internet-exposed SolarWinds Web Help Desk (WHD) instances to gain remote code execution and pivot deeper into enterprise networks, according to Microsoft. The attacks, observed in December 2025 and again in February 2026, show how a single exposed application can lead to full domain compromise when […] The post SolarWinds Web Help Desk RCE Exploited in Multi-Stage Enterprise Attacks on Exposed Servers appeared first on VPN Central.