BaseFortify

Publication date: 2026-01-28

Last updated on: 2026-02-26

Assigner: SolarWinds

Description

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected by authentication.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-28

Last Modified

2026-02-26

Generated

2026-07-06

AI Q&A

2026-01-29

EPSS Evaluated

2026-07-05

NVD

CVE-2025-40552

Affected Vendors & Products

Vendor	Product	Version / Range
solarwinds	web_help_desk	to 2026.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1390	The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.

Attack-Flow Graph

Executive Summary

This vulnerability is an authentication bypass in SolarWinds Web Help Desk that allows a malicious actor to perform actions and access methods that should normally require authentication.

Impact Analysis

Exploitation of this vulnerability can lead to unauthorized access, allowing attackers to execute high-impact actions that compromise confidentiality, integrity, and availability of the system.

Hi! I’m here to help you understand CVE-2025-40552. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70