CVE-2025-40551 SolarWinds Web Help Desk
SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
- CVSS
- not scored
On CISA’s exploited list
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
- Added
- 2026-02-03
- Federal patch deadline
- 2026-02-06
- Ransomware use
- not known