PT-2026-5071 · Solarwinds · Solarwinds Web Help Desk

Published

2026-01-28

·

Updated

2026-02-10

·

CVE-2025-40536

CVSS v3.1
8.1
VectorAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk (affected versions not specified)
Description SolarWinds Web Help Desk is susceptible to a security control bypass. Exploitation could allow an unauthenticated attacker to gain access to certain restricted functionality. The vulnerability involves four critical flaws, one of which is identified as CVE-2025-40536. Successful exploitation may lead to unauthorized access and potentially remote code execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

Related Identifiers

BDU:2026-00930
CVE-2025-40536

Affected Products

Solarwinds Web Help Desk