cve-2025-40554
CRITICAL vulncheck_kev
Description
SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.
Timeline
- Published
- 2026-05-01 00:00 UTC
- Last Modified
- 2026-05-01
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"cvss": 0.0,
"datePublished": "2026-05-01T00:00:00Z",
"dateUpdated": "2026-05-01T00:00:00Z",
"description": "SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.",
"dueDate": "",
"id": "CVE-2025-40554",
"kev_catalogs": [
"vulncheck"
],
"knownRansomwareCampaignUse": "Known",
"product": "web_help_desk",
"requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
"severity": "CRITICAL",
"source": "vulncheck_kev",
"title": "SolarWinds web_help_desk Weak Authentication",
"vendor": "SolarWinds"
}
Enrichment data
Aggregated bundle (all enrichments)