SolarWinds Web Help Desk Obfuscated JSON

Danny Y@zendannyy

•updated Mar 11, 2026•2•0•58

Detects attempts to exploit a remote code execution vulnerability (CVE-2025-40553) in SolarWinds Web Help Desk. Attackers use hex-encoded escape sequences (`\xNN`) and other JSON parsing gotchas to bypass security filters and achieve deserialization of malicious objects.