CVE-2025-40537: SolarWinds Web Help Desk Hardcoded Credentials Vulnerability
Published Jan 28, 2026
·Updated
SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions.
Affected Software
2 affected components
SolarWinds Web Help Desk
SolarWinds Web Help Desk<2026.1
Remediation
Information
SolarWinds recommends customers upgrade to Web Help Desk version 2026.1, and to follow the steps in the guide to unlink the demo client from the admin user. The guide can be found in the release notes and the Web Help Desk Secure Configuration guide, which can be found here: https://documentation.solarwinds.com/en/success_center/whd/content/helpdesksecureconfiguration.htm https://documentation.solarwinds.com/en/success_center/whd/content/helpdesksecureconfiguration.htm .
Event History
Jan 28, 2026
CVE Published
via MITRE·07:31 AM
Data Sourced
via MITRE·07:31 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeaknessAffected Software
News Published
via BleepingComputer·02:39 PM
News Published
via BleepingComputer·02:40 PM
Feb 3, 2026
News Published
via BleepingComputer·07:37 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-40537?
CVE-2025-40537 has been classified as a critical vulnerability due to the potential for unauthorized administrative access.
2
How can I fix CVE-2025-40537?
To remediate CVE-2025-40537, update SolarWinds Web Help Desk to the latest version provided by SolarWinds.
3
What type of vulnerability is CVE-2025-40537?
CVE-2025-40537 is a hardcoded credentials vulnerability affecting SolarWinds Web Help Desk.
4
Which software is affected by CVE-2025-40537?
The affected software for CVE-2025-40537 is SolarWinds Web Help Desk.
5
Can CVE-2025-40537 lead to remote access?
Yes, CVE-2025-40537 could allow attackers to gain remote administrative access under specific conditions.