CVE-2025-40554 CRITICAL

CVE-2025-40554: SolarWinds Web Help Desk Authentication Bypass Vulnerability

Vendor Solarwinds

Product Web Help Desk

Weakness CWE-1390

Published January 28, 2026

Last update February 26, 2026

View on NVD All CVEs

CVSS base score

9.8/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.

Key dates

02Disclosure timeline

January 28, 2026 CVE published

February 26, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-40554 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1390.html

Related vulnerabilities

CVE-2025-40554: SolarWinds Web Help Desk Authentication Bypass Vulnerability

01Description

02Disclosure timeline

03References

04Related CVE