CVE-2025-40536 SolarWinds Web Help Desk
SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauthenticated attacker to gain access to certain restricted functionality.
- CVSS
- not scored
On CISA’s exploited list
SolarWinds Web Help Desk Security Control Bypass Vulnerability
- Added
- 2026-02-12
- Federal patch deadline
- 2026-02-15
- Ransomware use
- not known