CVE-2025-40554 2

Vulnerability (CVE)

CISA Adds Actively Exploited Solar Winds Web Help Desk RCE to KEV Catalog

CISA added CVE-2025-40551, a deserialization-of-untrusted-data flaw in SolarWinds Web Help Desk with a CVSS score of 9.8, to its Known Exploited Vulnerabilities catalog on Tuesday, flagging it as actively exploited and exploitable without authentication to...

Vulnerabilities & Patching

Solar Winds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth Bypass

Cyber Risks The Hacker News

SolarWinds released WHD 2026.1 to fix four critical Web Help Desk vulnerabilities, including CVE-2025-40551 and CVE-2025-40553, deserialization flaws that let an unauthenticated remote attacker achieve RCE and run arbitrary OS commands. CVE-2025-40552 and...

Vulnerabilities & Patching