SolarWinds Web Help Desk versions 2026.1 and prior contain a vulnerability classified as CWE-770, where resource allocation is not properly limited or throttled. This flaw can be exploited remotely without authentication to cause a denial-of-service condition by exhausting server memory, leading to a crash. The CVSS 3.1 base score is 8.2, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on availability. The vendor has not published any patch or official remediation details yet.

Successful exploitation results in denial of service by crashing the Web Help Desk server due to memory exhaustion. This impacts availability but does not affect confidentiality or integrity. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting exposure of the Web Help Desk server to untrusted networks and monitoring for unusual resource consumption patterns. Avoid deploying this software in environments where availability is critical without additional protective controls.