FlagThis
← Back to CVE List
Vulnerability Intelligence Report
SolarWinds Web Help Desk Authentication Bypass Vulnerability

CVE-2025-40554

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.

Nuclei Template
CVSS Base Score
9.8
CRITICAL
Exploitability:3.9
Impact Score:5.9
EPSS Probability:58.45%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Weaknesses (CWE)

CWE-1390 ↗CWE-1390 Weak Authentication

Affected Products & Versions

Vendor Product Affected Versions
SolarWinds Web Help Desk 12.8.8 HF1 and below (affected)

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗ GitHub Advisory ↗
No reference links found.

Threat Intelligence Signals

Nuclei Template
SCANNER AVAILABLE
EPSS Score
58.447%
GitHub Advisory
GHSA-jm7r-g967-8pch ↗

Identity & Timeline

StatusPUBLISHED
Assigning AuthoritySolarWinds · Vendor · USA
Reserved2025-04-16T08:01:25
Published2026-01-28T07:36:50
Patch Date2026-01-28
Last Updated2026-02-26T15:04:48

Related Intelligence

Related CVEs
CVE-2026-28323 CVSS 9.8 — SolarWinds Web Help Desk is found to be affected by a SAML authenticat…
CVE-2025-40553 CVSS 9.8 — SolarWinds Web Help Desk was found to be susceptible to an untrusted d…
CVE-2025-40552 CVSS 9.8 — SolarWinds Web Help Desk was found to be susceptible to an authenticat…
CVE-2025-40551 CVSS 9.8 — SolarWinds Web Help Desk was found to be susceptible to an untrusted d…
CVE-2025-26399 CVSS 9.8 — SolarWinds Web Help Desk was found to be susceptible to an unauthentic…
LINK COPIED TO CLIPBOARD