Solarwinds Whd Obfuscated Json Deserialization

nomit vyas@xoxo

•updated Mar 9, 2026•1•0•74

Detects attempts to exploit a deserialization vulnerability (CVE-2025-40553) in SolarWinds Web Help Desk. Attackers use non-standard hex escape sequences (e.g., `\xNN`) in JSON payloads to bypass security filters and achieve remote code execution.