CVE-2025-40536
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2026-01-28

Last updated on: 2026-02-13

Assigner: SolarWinds

Description
SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-28
Last Modified
2026-02-13
Generated
2026-06-16
AI Q&A
2026-01-29
EPSS Evaluated
2026-06-15
NVD
CVE-2025-40536
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
solarwinds web_help_desk to 2026.1 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-693 The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability in SolarWinds Web Help Desk allows an unauthenticated attacker to bypass security controls and gain access to certain restricted functionality within the application.

Impact Analysis

Exploitation of this vulnerability could allow an attacker without authentication to access restricted features, potentially leading to unauthorized actions, data compromise, or disruption of services.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-40536. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart