EXPOSURES › CVE-2025-40536

CVE-2025-40536

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2026-02-12 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-40536 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatchedrce

SolarWinds Web Help Desk unpatched RCE

SolarWinds Web Help Desk had an unpatched security control bypass vulnerability allowing unauthenticated attackers to access restricted functionality, potentially leading to data breaches or ransomware attacks.

Shame score — Unpatched vulnerability actively exploited by attackers.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

SolarWinds · vendor Web Help Desk · product

DESCRIPTION

SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauthenticated attacker to gain access to certain restricted functionality.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.