BaseFortify

Publication date: 2026-01-28

Last updated on: 2026-02-03

Assigner: SolarWinds

Description

SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-28

Last Modified

2026-02-03

Generated

2026-07-06

AI Q&A

2026-01-29

EPSS Evaluated

2026-07-05

NVD

CVE-2025-40537

Affected Vendors & Products

Vendor	Product	Version / Range
solarwinds	web_help_desk	to 2026.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability in SolarWinds Web Help Desk involves hardcoded credentials that could allow an attacker, under certain conditions, to gain access to administrative functions.

Impact Analysis

An attacker exploiting this vulnerability could gain administrative access, potentially leading to unauthorized control over the system, data compromise, and disruption of services.

Hi! I’m here to help you understand CVE-2025-40537. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70