CVE-2025-40554: SolarWinds Web Help Desk Authentication Bypass Vulnerability
SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SolarWinds Web Help Deskto a version that resolves this vulnerability.Fixed in 2026.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40554?
CVE-2025-40554 is considered a critical vulnerability due to its potential for authentication bypass.
How do I fix CVE-2025-40554?
To fix CVE-2025-40554, update SolarWinds Web Help Desk to the latest version that addresses this vulnerability.
What actions can an attacker perform if CVE-2025-40554 is exploited?
If exploited, CVE-2025-40554 allows an attacker to invoke unauthorized actions within SolarWinds Web Help Desk.
Which versions of SolarWinds Web Help Desk are affected by CVE-2025-40554?
CVE-2025-40554 affects specific versions of SolarWinds Web Help Desk that are not patched against the vulnerability.
Is there any workaround for CVE-2025-40554?
Currently, the recommended action for CVE-2025-40554 is to apply the available update rather than relying on a workaround.