Three KEV-Listed SolarWinds Products Reach End of Life: November 2026

By Scott Bissett  ·  Published: October 11, 2026  ·  EOL Watch — deadline analysis  ·  Read at SolarWinds' Serv-U, SolarWinds Platform and Web Help Desk release-history pages, the release notes they link and SolarWinds' End of Life Policy on October 11, 2026; lifecycle dates as we serve them.

Three SolarWinds products with entries in CISA's Known Exploited Vulnerabilities catalog reach End-of-Life in November 2026. SolarWinds publishes a release-history page for each self-hosted product, and three of them carry November dates. The Serv-U release history gives Serv-U 15.5.1 an End-of-Life (EoL) date of November 18, 2026. The SolarWinds Platform release history gives both 2023.3 and 2023.4 an EoL date of November 20, 2026. The Web Help Desk release history gives every supported 12.x line, 12.4 through 12.8, an EoL date of November 30, 2026. All three releases are already past the earlier of SolarWinds' two dates, End-of-Engineering (EoE): Serv-U 15.5.1 since February 18, 2026, Platform 2023.3 and 2023.4 since November 20, 2025, and Web Help Desk 12.x since July 4, 2026. And all three products have entries in CISA's Known Exploited Vulnerabilities catalog, which is why the three dates belong in one guide.

The November calendar, product by product

SolarWinds dates each release individually with three dates: the EoL announcement, the EoE effective date and the EoL effective date. The tables below carry the two effective dates as we serve them (the support field is EoE, the eol field is EoL, exactly as SolarWinds prints them) and the release date from each release's own notes. The Status column is the site's generic badge, computed from the EoL date at every build; the last column is SolarWinds' phase on the day this was written.

Serv-U: 15.5.1 on November 18

Serv-U is SolarWinds' file transfer server (Serv-U MFT Server and Serv-U FTP Server), the kind of system that exists to exchange files with outside parties and is therefore commonly reachable from the internet. Serv-U 15.5 reached its own End-of-Life on October 8, 2026, and 15.5.1 follows on November 18, 2026. Every row SolarWinds lists, as we serve it on the Serv-U page:

"Not announced" means SolarWinds' page has no EoL row for the release; "Not published" means SolarWinds no longer serves release notes for it, so we state no release date. Two rows on SolarWinds' page cover ranges ("15.3.2 and earlier", "15.1.6 and earlier") and the labels keep that wording.

SolarWinds Platform (Orion): 2023.3 and 2023.4 on November 20

The SolarWinds Platform is the shared base of SolarWinds' self-hosted monitoring products: Network Performance Monitor, Server and Application Monitor, NetFlow Traffic Analyzer, Network Configuration Manager and the rest. SolarWinds called it the Orion Platform until release 2022.2, and the modules have carried the platform's version number since 2020.2, so a Network Performance Monitor installation reporting 2023.4 is on the platform release in this table. Two platform releases share the November date, and the two after them already have dates of their own in 2027. The rows from 2023.1 forward, as we serve them on the SolarWinds Platform page (the older rows, 2022.4 back to 2015.1, are all End-of-Life and are on the product page):

SolarWinds publishes release notes for 2023.3 and later; the notes for 2023.2 and earlier are no longer served, so those rows carry no release date. Each module (Network Performance Monitor and the others) has its own release-history table as well; the module tables mostly repeat the platform dates, and the platform page is the one we serve.

Web Help Desk: every 12.x line on November 30

Web Help Desk (WHD) is SolarWinds' self-hosted IT ticketing and asset management server, whose end-user portal is often published to the internet. On one day in June 2026 SolarWinds announced the end of every 12.x line it still supported, from 12.4, which its page calls the earliest supported version, to 12.8, and gave all five the same two dates. The release history's EoL sentence for the newest of them reads: "SolarWinds will no longer provide technical support for WHD version 12.8 or earlier." Every row, as we serve it on the Web Help Desk page:

Two notes. The 12.7 row has no release date because SolarWinds serves release notes from 12.7.1 onward and none for 12.7.0. The 2026.2 row is served with the release day of 2026.2.1, because SolarWinds withdrew the original build: its 2026.2 release notes page now reads, in full, "SolarWinds removed Web Help Desk 2026.2 from the release portal while we complete additional quality work. To get the latest WHD features, install WHD 2026.1." The 2026.2.1 notes that replaced it are dated July 30, 2026.

End-of-Engineering and End-of-Life: the two phases as SolarWinds defines them

SolarWinds' End of Life Policy, read on October 11, 2026, defines the stages its release-history pages use. The three that apply to a self-hosted release:

End of Life (EOL) Announcement.

"EOL Announcement signifies the date when SolarWinds will communicate the discontinuation of SolarWinds version or product, as directed in our notice to customers eligible to receive support. SolarWinds will also publicly post the EOL Announcement for customers, including those not eligible to receive support."

End of Engineering (EOE) Date.

"EOE Date signifies when SolarWinds will cease engineering related to Self-Hosted Software and will cease providing engineering support related to the applicable Release. Prior to the EOE Date, SolarWinds will actively support the Release with service releases, bug fixes, workarounds, or patches for critical bugs reported through Software Support. When a Release reaches the EOE Date, it will, however, no longer be actively supported by Engineering. Technical Support will be available until the End of Life (EOL) Date, which is typically one year after the EOS Date, provided the end user is entitled to receive support. Technical support can provide access to previously released hot fixes, service releases, etc. Technical Support will not include, nor will it create any new bug fixes or feature additions or requests for any Software that is past the EOE Date."

End of Life (EOL) Date.

"EOL Date signifies when all technical support shall cease for all available Releases of the applicable Self-Hosted Software or SaaS offering."

The policy also says the company "strives to adhere to guidelines as described below but reserves the right to update its EOL policy at any time." For the three releases in this guide the practical reading is in the EOE paragraph: they are past the date after which SolarWinds says Technical Support "will not include, nor will it create any new bug fixes". What remains until the EoL date is access to support and to fixes already released. Whether a given 12.x or 2023.x installation has actually received a fix since its EoE date is not something the pages say, and we do not say it either.

The exploitation record

CISA's Known Exploited Vulnerabilities catalog, as we serve it, credits 4 entries to Serv-U, 1 entry to Orion and 5 entries to Web Help Desk. CISA files them under the vendor "SolarWinds" and the product names "Serv-U", "Orion" and "Web Help Desk"; we join the Orion entry to the SolarWinds Platform page because the platform is the product CISA names. The counts and the ransomware flags below are read from the catalog at every build of this site.

Serv-U. 4 catalog entries, 1 of them flagged by CISA with known ransomware campaign use: CVE-2021-35211 ("SolarWinds Serv-U Remote Code Execution Vulnerability", the one with the ransomware flag), CVE-2021-35247 ("Improper Input Validation"), CVE-2024-28995 ("Path Traversal") and CVE-2026-28318 ("Uncontrolled Resource Consumption"), the most recent, added to the catalog in June 2026. SolarWinds' fix for CVE-2026-28318 is Serv-U 15.5.4 Hotfix 1, whose release notes say: "Serv-U 15.5.4 Hotfix 1 provides bugfixes related to CVE-2026-28318" and "You must be on Serv-U 15.5.4 to download and install this hotfix. Other Serv-U versions are not compatible with the hotfix." A 15.5.1 server, past EoE since February 18, 2026, is one of those other versions.

SolarWinds Platform (Orion). 1 catalog entry, 0 of them flagged with known ransomware campaign use: CVE-2020-10148 ("SolarWinds Orion Authentication Bypass Vulnerability"), added to the catalog in November 2021. It predates every release in this guide's table; it is here because it is the catalog's record of the product, not because it reaches 2023.3 or 2023.4.

Web Help Desk. 5 catalog entries, 1 of them flagged with known ransomware campaign use: CVE-2024-28986 ("Deserialization of Untrusted Data"), CVE-2024-28987 ("Hardcoded Credential"), CVE-2025-40551 ("Deserialization of Untrusted Data"), CVE-2025-40536 ("Security Control Bypass") and CVE-2025-26399 ("Deserialization of Untrusted Data", the one with the ransomware flag). The Web Help Desk 2026.1 release notes, dated January 28, 2026, list CVE-2025-40536 and CVE-2025-40551 among the CVEs addressed in that release. The 12.x lines have been past EoE since July 4, 2026; under the policy quoted above, SolarWinds creates no new bug fixes for a release past that date.

The three products share a profile. A file transfer server, a help desk portal and a monitoring platform are each reachable by people outside the IT team, each hold credentials or files worth taking, and each has already been used in the wild, in CISA's judgement. CISA's required action in most of these entries is its standard sentence, apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. For a release past EoE the vendor instruction on every one of these pages is the same: begin transitioning to the latest version.

Where each server goes

SolarWinds answers this itself, on each release-history page, in the EoL announcement sentence for the retiring release: "Customers on Serv-U 15.5.1 should begin transitioning to the latest version of Serv-U." / "Customers on SolarWinds Platform 2023.4 should begin transitioning to the latest version of SolarWinds Platform." / "Customers on WHD version 12.8 should begin transitioning to the latest version of WHD." Each page states its current version at the top; the lines those versions belong to, as we serve them:

Serv-U. The release history's header names the 2026.3 line as current on the day of writing, and 2026.3 has no EoL row. The 15.5.4 line, the only one with the CVE-2026-28318 hotfix, has no EoL row either. Which build to install is SolarWinds' call, and its page prints it; the Serv-U page here carries each line's latest release as served.

SolarWinds Platform. The header names a current version in the 2026.2 line on the day of writing, and 2026.2 has no EoL row. The release notes for the current 2026.2 build carry SolarWinds' general advice: "SolarWinds recommends upgrading all environments at your earliest convenience to apply the latest performance and security fixes." SolarWinds' documentation also uses the name SolarWinds Observability Self-Hosted for the current self-hosted line; the platform release-history page linked above is the one we serve, and the SolarWinds Platform page here carries the current build as served.

Web Help Desk. The header names a current version in the 2026.2 line and reads "Earliest supported version: 12.4" on the day of writing. Two things from SolarWinds' own notes before a 12.x server moves. First, the withdrawal: the 2026.2 notes say SolarWinds "removed Web Help Desk 2026.2 from the release portal while we complete additional quality work", and 2026.2.1 is the build that replaced it. Second, an authentication change in 2026.2.1: "Servlet authentication is no longer available. Before upgrading to WHD 2026.2.1, review your current authentication method under Setup > General > Authentication. If it is set to Servlet authentication, plan your migration to SAML 2.0 or HTTP Header authentication prior to upgrade. Then, verify SSO functionality in the new environment before decommissioning your earlier instance." The 2026.1 line, released January 28, 2026, also has no EoL row and is the release whose notes list the two KEV-catalogued CVEs as addressed. The 2026.2 notes themselves say "To get the latest WHD features, install WHD 2026.1."

None of the three pages names a replacement product for the self-hosted line, and none is implied: each product continues in its 2026 releases. The Web Help Desk pages carry a line inviting customers to "Learn more about migrating from Web Help Desk to Service Desk", SolarWinds' SaaS help desk; that is an offer on SolarWinds' page, not an end-of-life instruction, and the dates in this guide apply to the self-hosted releases only.

What to do

On Serv-U 15.5.1: you have been past EoE since February 18, 2026, which under SolarWinds' policy means no new fixes are created for your release, and the only Serv-U hotfix for the KEV-catalogued CVE-2026-28318 is for 15.5.4. Move to the current line before November 18, 2026, while a support case can still be opened for the version you are leaving. If you are on 15.5 or 15.4.2, you are past EoL already, since October 8, 2026 and July 15, 2026 respectively.

On SolarWinds Platform 2023.3 or 2023.4: past EoE since November 20, 2025; EoL on November 20, 2026. SolarWinds' release notes say all SolarWinds Platform products share an underlying framework, so the platform upgrade is one project, not one per module. If you are on 2024.1 or 2024.2, note that both are past EoE as well (March 12, 2026 and July 9, 2026) and reach EoL on March 12, 2027 and July 9, 2027; a move made now should land on a line with no announcement, 2024.4 or later.

On Web Help Desk 12.4 to 12.8: past EoE since July 4, 2026; EoL on November 30, 2026. Read the 2026.2.1 authentication note quoted above before you schedule the upgrade, because a portal on Servlet authentication needs its SSO method changed first. Two of the product's KEV entries are listed as addressed in 2026.1; the 12.x lines are past the date after which SolarWinds says it creates no new bug fixes.

Everyone: the Serv-U, SolarWinds Platform and Web Help Desk pages carry every version with its release, End-of-Engineering and End-of-Life dates, re-read from SolarWinds' tables at every build, with the KEV entries CISA files against each product. A new EoL row on SolarWinds' page shows up there before it shows up here. The EOL Watch page lists the upcoming deadlines across the products we track, and How we verify our dates explains the rules every number on this page is held to.

Frequently Asked Questions

Related

• SolarWinds Serv-U — every release with its End-of-Engineering and End-of-Life dates and the KEV entries CISA files against it
• SolarWinds Platform (Orion) — every platform release from 2015.1 to the current line
• SolarWinds Web Help Desk — the 12.x lines and the 2026 releases that follow them
• EOL Watch — upcoming end-of-life deadlines across the products we track
• Exploited and unpatchable — products with a CISA KEV entry and no remaining vendor fix
• How we verify our dates — the rules every number on this site is held to