SolarWinds Web Help Desk Multiple Vulnerabilities

Multiple vulnerabilities were identified in SolarWinds Web Help Desk. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, elevation of privilege and security restriction bypass on the targeted system.

Note: 

CVE-2025-40551 is actively exploited in the wild. An unauthenticated attacker could exploit an untrusted data deserialization vulnerability, leading to remote code execution. Hence, the risk level is rated as Extremely High Risk.

CVE-2025-40536 is actively exploited in the wild. A security control bypass vulnerability could allow an unauthenticated attacker to gain access to certain restricted functionality. Hence, the risk level is rated as High Risk.

[Updated on 2026-02-04]

Updated Description, Related Links and Risk Level. 

[Updated on 2026-02-13]

Updated Description and Related Links.