SolarWinds Web Help Desk Vulnerability Actively Exploited
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-40551+3 related CVEs | Unauthenticated Deserialization RCE in SolarWinds Web Help Desk | 9.8 | 84% | KEV | KEV |
From the original article
2 min read at infosecurity-magazine.com
A US security agency has warned SolarWinds Web Help Desk users that a remote code execution (RCE) vulnerability patched by the vendor last week is being actively exploited. The US Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-40551 to its Known Exploited Vulnerabilities (KEV) Catalog yesterday, giving federal civilian agencies until Friday to patch it. The CVE has a CVSS score of 9.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.