CVEvulnerability

CVE-2025-40554

9.8 CRITICAL Published 2026-01-28 Modified 2026-06-17 Official page ↗

Status: Analyzed
Published: 2026-01-28
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-1390

Description

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.

Affected configurations

• solarwinds web help desk (< 2026.1)

Weakness · CWE (1)

CWE-1390 Weak Authentication weakness

References

https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm Release Notes
https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40554 Vendor Advisory

CVE-2025-40554

Description

Affected configurations

Related

Weakness · CWE (1)

References