VulnerabilityAnalyzed

CVE-2025-40554

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.

CRITICAL 9.8EPSS 58.4%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 58.4%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 58.45% probability · 99th percentile
CISA KEV: Not listed
Weakness: CWE-1390
Affected: solarwinds/web help desk
Source: psirt@solarwinds.com

References

https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htmRelease Notes
https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40554Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.