Vulnerabilitycritical

SolarWinds addressed four critical Web Help Desk flaws

Security Affairsby @securityaffairsJan 29, 2026 · 19:17 UTC (Jan 29, 2026)2 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-40552 CVE-2025-40553 CVE-2025-40554 CVE-2025-40551 CVE-2025-40536 CVE-2025-40537

Tags: cve-2025-40552 cve-2025-40553 cve-2025-40554 cve-2025-40551 cve-2025-40536 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-40551 +5 related CVEs CVE-2025-40536 CVE-2025-40553 CVE-2025-40554 CVE-2025-40552 CVE-2025-40537	Unauthenticated Deserialization RCE in SolarWinds Web Help Desk	9.8 group max	84%	KEV	Jan 28, 2026 KEV Feb 3, 2026

From the original article

2 min read at securityaffairs.com

SolarWinds patched six Web Help Desk vulnerabilities, including four critical flaws exploitable without authentication for RCE or auth bypass. SolarWinds released security updates to address six Web Help Desk vulnerabilities , including four critical bugs that allow unauthenticated remote code execution or authentication bypass.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.