← Back

CVE-2025-40554

nvd nistnuclei
Published: Jan 28, 2026Modified: Feb 3, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: psirt@solarwinds.com

Description

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.

Affected (1)

Solarwinds
1 product
Web Help Desk
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Web Help Desk
Before 2026.1

Related CWEs

CWE-1390
Weak Authentication
The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.

References (2)

Source: psirt@solarwinds.com
Release Notes
Source: psirt@solarwinds.com
Vendor Advisory

Timeline

No history available yet.