PT-2026-5074 · Solarwinds · Solarwinds Web Help Desk

Published 2026-01-28 · Updated 2026-03-02 · CVE-2025-40552

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk versions prior to 2026.1

Description SolarWinds Web Help Desk is affected by an authentication bypass issue. Successful exploitation allows a malicious actor to execute actions and methods that should require authentication, potentially granting unauthorized access to protected information. The issue stems from flaws in the authentication procedure and improper access controls.

Recommendations Upgrade to version 2026.1 or later.

Exploit

Fix

Weakness Enumeration

CWE-1390

Related Identifiers

BDU:2026-00932

CVE-2025-40552

Affected Products

Solarwinds Web Help Desk

References · 34

• 🔥 https://github.com/watchtowrlabs/watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553/blob/main/watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553.py · Exploit
• https://bdu.fstec.ru/vul/2026-00932 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-40552 · Security Note
• https://osv.dev/vulnerability/CVE-2025-40552 · Vendor Advisory
• https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm · Note
• https://twitter.com/NCIIPC/status/2016814774722711626 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1qr2hqk/top_10_trending_cves_30012026 · Reddit Post
• https://reddit.com/r/SecOpsDaily/comments/1qpkllx/secopsdaily_20260128_roundup · Reddit Post
• https://reddit.com/r/SecOpsDaily/comments/1qpf9ye/multiple_critical_solarwinds_web_help_desk · Reddit Post
• https://solarwinds.com/trust-center/security-advisories/CVE-2025-40552 · Patch, Vendor Advisory
• https://twitter.com/RedLegg/status/2016647474270576642 · Twitter Post
• https://twitter.com/samilaiho/status/2016779251660320987 · Twitter Post
• https://twitter.com/ThreatSynop/status/2017028687783198739 · Twitter Post
• https://twitter.com/TweetThreatNews/status/2016692845105553633 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1rgzu4k/top_10_trending_cves_28022026 · Reddit Post