VULNERABILITY INTELLIGENCE

CVE-2025-40536

CVSS score8.1 HIGH

EPSS probability73.56%

CISA KEVKnown exploited vulnerability

Published2026-01-28

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

SolarWinds Web Help Desk Security Control Bypass Vulnerability

Vendor / product: SolarWinds / Web Help Desk

Description

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.

Weakness classification

CWE-693: Protection Mechanism Failure

Primary references

psirt@solarwinds.com — Release Notes
psirt@solarwinds.com — Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Third Party Advisory