SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk contains an authentication bypass vulnerability caused by improper access control, letting attackers execute protected actions without authentication, exploit requires no special conditions. id: CVE-2025-40552 info: name: SolarWinds Web Help Desk - Authentication Bypass...

watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553

CVE-2025-40552 与 CVE-2025-40553 SolarWinds Web Help Desk 预认证 RCE 链 SolarWinds Web Help Desk 预认证 RCE 链检测产物生成器工具 描述 此检测产物生成器用于验证 SolarWinds Web Help Desk 实例是否存在 CVE-2025-40552 和 CVE-2025-40553 漏洞。 检测产物生成器尝试执行两项操作： 使用 CVE-2025-40552 绕过身份验证 - 此检查非常准确。 如果成功，它会尝试通过执行 cmd.exe /c whoami 命令来验证...

Exploit for CVE-2025-40552

CVE-2025-40552 and CVE-2025-40553 SolarWinds Web Help Desk Pre...

CVE-2025-40552

creationtimestamp| type| source ---|---|--- 2026-01-28 09:49:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdhyoj256b2i 2026-01-28 10:15:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdi244m34i2g 2026-01-28 13:21:55+00:00| seen|...

CVE-2025-40552

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected by authentication...