BaseFortify

Publication date: 2026-01-28

Last updated on: 2026-02-13

Assigner: SolarWinds

Description

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-28

Last Modified

2026-02-13

Generated

2026-07-06

AI Q&A

2026-01-29

EPSS Evaluated

2026-07-05

NVD

CVE-2025-40536

Affected Vendors & Products

Vendor	Product	Version / Range
solarwinds	web_help_desk	to 2026.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-693	The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Attack-Flow Graph

Executive Summary

This vulnerability in SolarWinds Web Help Desk allows an unauthenticated attacker to bypass security controls and gain access to certain restricted functionality within the application.

Impact Analysis

Exploitation of this vulnerability could allow an attacker without authentication to access restricted features, potentially leading to unauthorized actions, data compromise, or disruption of services.

Hi! I’m here to help you understand CVE-2025-40536. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70