CVE Watch—

CVE-2025-40551

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CVSS

—

Sin CVSS

EPSS

84.2%

p100

KEV

SÍ

3 feb 2026

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

83.6%EPSS · 30 días84.2%

2026-09-172026-10-15

Ficha del catálogo KEV

Producto

SolarWinds / Web Help Desk

Vulnerabilidad

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

Añadido a KEV

3 feb 2026

Remediar antes de

6 feb 2026

Uso conocido en ransomware

Descripción resumida

SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://www.solarwinds.com/trust-center/security-advisories/cve-2025-40551 ; https://nvd.nist.gov/vuln/detail/CVE-2025-40551

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2025-263999.8 CRÍ

99.8%

KEV—80SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability5d CVE-2024-28987—

99.8%

KEV—80SolarWinds Web Help Desk Hardcoded Credential Vulnerability—CVE-2024-28986—

99.7%

KEV—80SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability—CVE-2025-40536—

99.5%

KEV—80SolarWinds Web Help Desk Security Control Bypass Vulnerability—