CVE-2025-40554

Published Jan 28, 2026

Last updated 20 hours ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-40554 is an authentication bypass vulnerability found in SolarWinds Web Help Desk (WHD). This flaw allows an attacker to invoke specific internal actions within the WHD platform without proper authorization. Successful exploitation of CVE-2025-40554 could lead to unauthorized access to sensitive functionality within the Web Help Desk system. Some reports indicate that this authentication bypass could potentially be leveraged to achieve remote code execution (RCE).

Description: SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.
Source: psirt@solarwinds.com
NVD status: Undergoing Analysis

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

psirt@solarwinds.com: CWE-1390

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 11

References