← Back

CVE-2025-40551

nvd nistnuclei
Published: Jan 28, 2026Modified: Jun 17, 2026CISA KEV

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: psirt@solarwinds.com (Secondary)

Description

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.

Affected (1)

Solarwinds
1 product
Web Help Desk
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Web Help Desk
Before 2026.1

Related CWEs

CWE-502
Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (3)

Source: psirt@solarwinds.com
Release Notes
Source: psirt@solarwinds.com
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.