CVE-2025-40536: SolarWinds Web Help Desk Security Control Bypass

SolarWinds Web Help Desk Security Control Bypass Vulnerability. SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauthenticated attacker to gain access to certain restricted functionality.

• CISA KEV-listed (remediation due 2026-02-15)
• EPSS 70.4% (98.7% percentile)

Detection rules

• Suspicious Child Process of SolarWinds WebHelpDesk high

Browse the CVE database

Read the full analysis on IntelFusions