CVE-2025-40554: SolarWinds Web Help Desk Authentication Bypass Vulnerability
Published Jan 28, 2026
·Updated
SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.
Affected Software
2 affected components
SolarWinds Web Help Desk
SolarWinds Web Help Desk<2026.1
Remediation
Information
SolarWinds recommends users upgrade to Web Help Desk version 2026.1.
Event History
Jan 28, 2026
CVE Published
via MITRE·07:36 AM
Data Sourced
via MITRE·07:36 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeaknessAffected Software
News Published
via BleepingComputer·02:39 PM
News Published
via BleepingComputer·02:40 PM
Feb 3, 2026
News Published
via BleepingComputer·07:37 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-40554?
CVE-2025-40554 is considered a critical vulnerability due to its potential for authentication bypass.
2
How do I fix CVE-2025-40554?
To fix CVE-2025-40554, update SolarWinds Web Help Desk to the latest version that addresses this vulnerability.
3
What actions can an attacker perform if CVE-2025-40554 is exploited?
If exploited, CVE-2025-40554 allows an attacker to invoke unauthorized actions within SolarWinds Web Help Desk.
4
Which versions of SolarWinds Web Help Desk are affected by CVE-2025-40554?
CVE-2025-40554 affects specific versions of SolarWinds Web Help Desk that are not patched against the vulnerability.
5
Is there any workaround for CVE-2025-40554?
Currently, the recommended action for CVE-2025-40554 is to apply the available update rather than relying on a workaround.