Lucene search
K

CVE-2025-40553 SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability

🗓️ 28 Jan 2026 07:35:41Reported by SolarWindsType 
cvelist
 cvelist
🔗 www.cve.org👁 26 Views

The CVE-2025-40553 vulnerability in SolarWinds Web Help Desk allows remote code execution via untrusted data deserialization without authentication.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for CVE-2025-40552
13 Feb 202615:42
githubexploit
ATTACKERKB
CVE-2025-40553
28 Jan 202607:35
attackerkb
Circl
CVE-2025-40553
28 Jan 202610:09
circl
CNNVD
SolarWinds Web Help Desk code-related vulnerabilities
28 Jan 202600:00
cnnvd
CVE
CVE-2025-40553
28 Jan 202607:35
cve
EUVD
EUVD-2025-206482
28 Jan 202607:35
euvd
NCSC
Vulnerabilities fixed in SolarWinds Web Help Desk
2 Feb 202609:47
ncsc
Nuclei
SolarWinds Web Help Desk - Authentication Bypass
27 Jun 202603:01
nuclei
NVD
CVE-2025-40553
28 Jan 202608:16
nvd
OSV
CVE-2025-40552
28 Jan 202608:16
osv
Rows per page
[
  {
    "defaultStatus": "affected",
    "product": "Web Help Desk",
    "vendor": "SolarWinds",
    "versions": [
      {
        "status": "affected",
        "version": "12.8.8 HF1 and below"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Jan 2026 07:35Current
CVSS 3.19.8
EPSS0.6039
26