cve-2025-40554

CRITICAL vulncheck_kev
Description

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.

Timeline
Published
2026-05-01 00:00 UTC
Last Modified
2026-05-01
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 0.0,
  "datePublished": "2026-05-01T00:00:00Z",
  "dateUpdated": "2026-05-01T00:00:00Z",
  "description": "SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.",
  "dueDate": "",
  "id": "CVE-2025-40554",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Known",
  "product": "web_help_desk",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "CRITICAL",
  "source": "vulncheck_kev",
  "title": "SolarWinds web_help_desk Weak Authentication",
  "vendor": "SolarWinds"
}
Enrichment data
Nuclei templates
Aggregated bundle (all enrichments)
View JSON API Download JSON