CVE-2025-40552
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2026-01-28

Last updated on: 2026-02-26

Assigner: SolarWinds

Description
SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected by authentication.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-28
Last Modified
2026-02-26
Generated
2026-06-16
AI Q&A
2026-01-29
EPSS Evaluated
2026-06-14
NVD
CVE-2025-40552
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
solarwinds web_help_desk to 2026.1 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1390 The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is an authentication bypass in SolarWinds Web Help Desk that allows a malicious actor to perform actions and access methods that should normally require authentication.

Impact Analysis

Exploitation of this vulnerability can lead to unauthorized access, allowing attackers to execute high-impact actions that compromise confidentiality, integrity, and availability of the system.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-40552. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart