Lucene search
+L

3074 matches found

Vulnrichment
Vulnrichment
added 2026/01/28 7:34 a.m.2 views

CVE-2025-40552 SolarWinds Web Help Desk Authentication Bypass Vulnerability

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected by authentication...

9.8CVSS5.9AI score0.49734EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/01/28 7:34 a.m.179 views

CVE-2025-40552 SolarWinds Web Help Desk Authentication Bypass Vulnerability

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected by authentication...

9.8CVSS0.49734EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/01/28 7:33 a.m.11 views

CVE-2025-40551

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS6.2AI score0.8413EPSS
Exploits3References3
CVE
CVE
added 2026/01/28 7:33 a.m.67 views

CVE-2025-40551

SolarWinds Web Help Desk (before 2026.1) contains an untrusted data deserialization vulnerability in the jabsorb JSON-RPC library (CVE-2025-40551) that can lead to unauthenticated remote code execution. Public reports describe exploitation chains including JNDI injection when combined with other ...

9.8CVSS6.2AI score0.8413EPSS
In wildExploits3References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/28 7:33 a.m.3 views

CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS6.2AI score0.8413EPSS
Exploits3References2
EUVD
EUVD
added 2026/01/28 7:33 a.m.21 views

EUVD-2025-206426

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS6.2AI score0.8413EPSS
Exploits3References2
Cvelist
Cvelist
added 2026/01/28 7:33 a.m.42 views

CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS0.8413EPSS
Exploits3References2
Vulnrichment
Vulnrichment
added 2026/01/28 7:31 a.m.3 views

CVE-2025-40537 SolarWinds Web Help Desk Hardcoded Credentials Vulnerability

SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions...

7.5CVSS5.8AI score0.00534EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/28 7:31 a.m.31 views

CVE-2025-40537 SolarWinds Web Help Desk Hardcoded Credentials Vulnerability

SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions...

7.5CVSS0.00534EPSS
Exploits0References2
CVE
CVE
added 2026/01/28 7:31 a.m.31 views

CVE-2025-40537

SolarWinds Web Help Desk (WHD) is affected by CVE-2025-40537, a hard-coded credentials vulnerability that could allow access to administrative functions. The issue is addressed in WHD version 2026.1 (fixes for multiple WHD flaws, including 40537). The CVE is discussed alongside related WHD flaws ...

7.5CVSS5.8AI score0.00534EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/28 7:31 a.m.8 views

CVE-2025-40537

SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions...

7.5CVSS5.8AI score0.00534EPSS
Exploits0References3
EUVD
EUVD
added 2026/01/28 7:31 a.m.7 views

EUVD-2025-206422

SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions...

7.5CVSS5.8AI score0.00534EPSS
Exploits0References2
CVE
CVE
added 2026/01/28 7:30 a.m.41 views

CVE-2025-40536

CVE-2025-40536 relates to SolarWinds Web Help Desk and is described in connected sources as a security control bypass that could allow an unauthenticated attacker to access certain restricted functionality. The KEV/KEA entries note active exploitation risk, and a Metasploit module documents an un...

9.8CVSS5.9AI score0.81624EPSS
In wildExploits4References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/28 7:30 a.m.6 views

CVE-2025-40536

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality...

9.8CVSS5.9AI score0.81624EPSS
In wildExploits4References4
Vulnrichment
Vulnrichment
added 2026/01/28 7:30 a.m.3 views

CVE-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality...

8.1CVSS5.9AI score0.81624EPSS
Exploits4References2
EUVD
EUVD
added 2026/01/28 7:30 a.m.6 views

EUVD-2025-206418

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality...

8.1CVSS5.9AI score0.81624EPSS
Exploits4References2
CNNVD
CNNVD
added 2026/01/28 12:0 a.m.9 views

SolarWinds Web Help Desk code-related vulnerabilities

SolarWinds Web Help Desk is a service desk and asset management software provided by the American company SolarWinds. This software supports centralized knowledge bases, IT asset management, project and task management functions. There is a code vulnerability in SolarWinds Web Help Desk, which...

9.8CVSS7.8AI score0.6039EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/01/28 12:0 a.m.11 views

PT-2026-5076

Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk versions 12.8.8 HF1 and earlier Description SolarWinds Web Help Desk is affected by an authentication bypass issue. Successful exploitation could allow a remote attacker to bypass security restrictions and perform...

10CVSS6.1AI score0.58447EPSS
Exploits2References35
CNNVD
CNNVD
added 2026/01/28 12:0 a.m.10 views

SolarWinds Web Help Desk security vulnerabilities

SolarWinds Web Help Desk is a service desk and asset management software provided by the American company SolarWinds. This software supports centralized knowledge bases, IT asset management, project and task management functions. There is a security vulnerability in SolarWinds Web Help Desk, whic...

9.8CVSS7.5AI score0.49734EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/01/28 12:0 a.m.6 views

PT-2026-5075

Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk affected versions not specified Description SolarWinds Web Help Desk is susceptible to an untrusted data deserialization issue. Successful exploitation of this issue could allow a remote attacker to execute arbitrary...

9.8CVSS7.7AI score0.6039EPSS
Exploits1References28
Rows per page
Query Builder