VULNERABILITY INTELLIGENCE

CVE-2025-40551

CVSS score9.8 CRITICAL
EPSS probability84.18%
CISA KEVKnown exploited vulnerability
Published2026-01-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

Vendor / product: SolarWinds / Web Help Desk

Description

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.

Weakness classification

  • CWE-502: Deserialization of Untrusted Data

Primary references