CVE-2025-40554

9.8 criticalEPSS 61%

Critical (9.8) in solarwinds web help desk. EPSS 61% chance of exploitation in the next 30 days.

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 61% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-1390
Published: 2026-01-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

solarwinds:web_help_desk

References

https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm
https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40554

Check your stack JSON