PT-2026-5076 · Solarwinds · Solarwinds Web Help Desk

CVE-2025-40554 · Published 2026-01-28 · Updated 2026-05-04

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk versions 12.8.8 HF1 and earlier

Description SolarWinds Web Help Desk is affected by an authentication bypass issue. Successful exploitation could allow a remote attacker to bypass security restrictions and perform specific actions within Web Help Desk. The issue relates to flaws in the authentication procedure.

Recommendations Versions prior to 12.8.8 HF1 should be updated.

Fix

Weakness Enumeration

CWE-1390

Related Identifiers

BDU:2026-00933

CVE-2025-40554

Affected Products

Solarwinds Web Help Desk

References · 35

• https://bdu.fstec.ru/vul/2026-00933 · Security Note
• https://osv.dev/vulnerability/CVE-2025-40554 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40554 · Security Note
• https://solarwinds.com/trust-center/security-advisories/CVE-2025-40554 · Patch, Vendor Advisory
• https://twitter.com/securityRSS/status/2016807044771185119 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1qsvncf/top_10_trending_cves_01022026 · Reddit Post
• https://twitter.com/CVEnew/status/2016419905831043118 · Twitter Post
• https://twitter.com/ThreatSynop/status/2017028687783198739 · Twitter Post
• https://t.me/CVEtracker/43120 · Telegram Post
• https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm · Note
• https://twitter.com/nkprorhah/status/2018159918369628470 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1ripw1i/top_10_trending_cves_02032026 · Reddit Post
• https://t.me/aptreports/28514 · Telegram Post
• https://twitter.com/TweetThreatNews/status/2016692845105553633 · Twitter Post
• https://twitter.com/DarkWebInformer/status/2016936977430695962 · Twitter Post