PT-2026-5074 · Solarwinds · Solarwinds Web Help Desk

CVE-2025-40552 · Publicado 2026-01-28 · Atualizado 2026-03-02

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk versions prior to 2026.1

Description SolarWinds Web Help Desk is affected by an authentication bypass issue. Successful exploitation allows a malicious actor to execute actions and methods that should require authentication, potentially granting unauthorized access to protected information. The issue stems from flaws in the authentication procedure and improper access controls.

Recommendations Upgrade to version 2026.1 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-1390

Identificadores relacionados

BDU:2026-00932

CVE-2025-40552

Produtos afetados

Solarwinds Web Help Desk

Referências · 34

• 🔥 https://github.com/watchtowrlabs/watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553/blob/main/watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553.py · Exploit
• https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm · Nota
• https://twitter.com/NCIIPC/status/2016814774722711626 · Publicação no Twitter
• https://reddit.com/r/CVEWatch/comments/1qr2hqk/top_10_trending_cves_30012026 · Publicação no Reddit
• https://reddit.com/r/SecOpsDaily/comments/1qpkllx/secopsdaily_20260128_roundup · Publicação no Reddit
• https://reddit.com/r/SecOpsDaily/comments/1qpf9ye/multiple_critical_solarwinds_web_help_desk · Publicação no Reddit
• https://solarwinds.com/trust-center/security-advisories/CVE-2025-40552 · Correção, Aviso do Fabricante
• https://twitter.com/RedLegg/status/2016647474270576642 · Publicação no Twitter
• https://twitter.com/samilaiho/status/2016779251660320987 · Publicação no Twitter
• https://twitter.com/ThreatSynop/status/2017028687783198739 · Publicação no Twitter
• https://twitter.com/TweetThreatNews/status/2016692845105553633 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-00932 · Nota de Segurança
• https://reddit.com/r/CVEWatch/comments/1rgzu4k/top_10_trending_cves_28022026 · Publicação no Reddit
• https://reddit.com/r/CVEWatch/comments/1rhuktk/top_10_trending_cves_01032026 · Publicação no Reddit
• https://twitter.com/securityRSS/status/2016807044771185119 · Publicação no Twitter