Vulnerability intelligence
CVE-2025-40551
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
CVSS Score
9.8
Critical
EPSS — Exploit Probability
84%
Riskier than 100% of all CVEs · checked 2026-10-23
Exploitation
Confirmed in the wild
KEV since 2026-02-03
Remediation
Unconfirmed
Federal deadline 2026-02-06
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2026-02-06.
15 articles across 6 outlets · first covered Jan 28, 2026 · latest Feb 13, 2026
Coverage timeline
RSS-
CISA Warns of Exploited SolarWinds, Notepad++, Microsoft Vulnerabilitieswww.securityweek.com · Feb 13, 2026
-
SolarWinds WHD Attacks Highlight Risks of Exposed Appswww.darkreading.com · Feb 10, 2026
-
Virtual Invasion: SolarWinds WHD Exploited to Host Hidden QEMU VMssecurityonline.info · Feb 10, 2026
-
SolarWinds Web Help Desk Exploited for RCE in Multi-Stage Attacks on Exposed Serversthehackernews.com · Feb 9, 2026
-
Attackers abuse SolarWinds Web Help Desk to install Zoho agents and Velociraptorsecurityaffairs.com · Feb 9, 2026
-
Recent SolarWinds Flaws Potentially Exploited as Zero-Dayswww.securityweek.com · Feb 9, 2026
-
PoC Public & Exploited: Critical SolarWinds Help Desk Flaw Exploited in the Wildsecurityonline.info · Feb 4, 2026
-
Fresh SolarWinds Vulnerability Exploited in Attackswww.securityweek.com · Feb 4, 2026
-
CISA Adds Actively Exploited SolarWinds Web Help Desk RCE to KEV Catalogthehackernews.com · Feb 4, 2026
-
U.S. CISA adds SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab flaws to its Known Exploited Vulnerabilities catalogsecurityaffairs.com · Feb 3, 2026
-
SolarWinds Web Help Desk Update Addresses High-Risk RCE & Auth Bypass Bugssocradar.io · Jan 30, 2026
-
SolarWinds addressed four critical Web Help Desk flawssecurityaffairs.com · Jan 29, 2026
-
SolarWinds Patches Critical Web Help Desk Vulnerabilitieswww.securityweek.com · Jan 29, 2026
-
SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth Bypassthehackernews.com · Jan 29, 2026
-
SolarWinds Web Help Desk Hit with Multiple RCE and Auth Bypass Vulnerabilitiessecurityonline.info · Jan 28, 2026