by Kastro
Paper/Archive/CVE-2025-40554

CVE-2025-40554

SolarWinds Web Help Desk — SolarWinds Web Help Desk Authentication Bypass Vulnerability

EPSS 61%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 99.1.991 × 2019.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.

Affected

ProductAffectedFixed inSource
Web Help Desk12.8.8 HF1 and below–CNA

Scores by source

SolarWinds (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

patchsolarwinds.com/trust-center/security-advisories/CVE-2025-40554refdocumentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm