cve-2025-40553
HIGH vulncheck_kev
Description
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
Timeline
- Published
- 2026-09-01 00:00 UTC
- Last Modified
- 2026-09-01
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"cvss": 0.0,
"datePublished": "2026-09-01T00:00:00Z",
"dateUpdated": "2026-09-01T00:00:00Z",
"description": "SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.",
"dueDate": "",
"id": "CVE-2025-40553",
"kev_catalogs": [
"vulncheck"
],
"knownRansomwareCampaignUse": "Unknown",
"product": "web_help_desk",
"requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
"severity": "HIGH",
"source": "vulncheck_kev",
"title": "SolarWinds web_help_desk Deserialization of Untrusted Data",
"vendor": "SolarWinds"
}