Lucene search
+L

29629 matches found

NVD
NVD
added 2026/01/28 8:16 a.m.10 views

CVE-2025-40553

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS0.6039EPSS
SaveExploits1References3
OSV
OSV
added 2026/01/28 8:16 a.m.22 views

CVE-2025-40553

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS6.1AI score0.6039EPSS
SaveExploits1References3
OSV
OSV
added 2026/01/28 8:16 a.m.16 views

CVE-2025-40551

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS6.1AI score0.83622EPSS
SaveExploits3References3
NVD
NVD
added 2026/01/28 8:16 a.m.11 views

CVE-2025-40551

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS0.83622EPSS
SaveExploits3References3
Vulnrichment
Vulnrichment
added 2026/01/28 7:35 a.m.4 views

CVE-2025-40553 SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS6.2AI score0.6039EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/01/28 7:35 a.m.6 views

CVE-2025-40553

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS6.2AI score0.6039EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/01/28 7:35 a.m.37 views

CVE-2025-40553 SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS0.6039EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/01/28 7:35 a.m.10 views

EUVD-2025-206482

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS6.2AI score0.6039EPSS
SaveExploits1References2
CVE
CVE
added 2026/01/28 7:35 a.m.40 views

CVE-2025-40553

CVE-2025-40553 affects SolarWinds Web Help Desk. The vulnerability is an untrusted data deserialization flaw that could lead to remote code execution and can be exploited without authentication. Fixed in WHD 2026.1; users should apply the latest update to mitigate. The connected sources also refe...

9.8CVSS6.2AI score0.6039EPSS
SaveIn wildExploits1References3Affected Software1
EUVD
EUVD
added 2026/01/28 7:33 a.m.26 views

EUVD-2025-206426

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS6.2AI score0.83622EPSS
SaveExploits3References2
Cvelist
Cvelist
added 2026/01/28 7:33 a.m.57 views

CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS0.83622EPSS
SaveExploits3References2
Vulnrichment
Vulnrichment
added 2026/01/28 7:33 a.m.5 views

CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS6.2AI score0.83622EPSS
SaveExploits3References2
ATTACKERKB
ATTACKERKB
added 2026/01/28 7:33 a.m.13 views

CVE-2025-40551

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS6.2AI score0.83622EPSS
SaveExploits3References3
CVE
CVE
added 2026/01/28 7:33 a.m.150 views

CVE-2025-40551

SolarWinds Web Help Desk (before 2026.1) contains an untrusted data deserialization vulnerability in the jabsorb JSON-RPC library (CVE-2025-40551) that can lead to unauthenticated remote code execution. Public reports describe exploitation chains including JNDI injection when combined with other ...

9.8CVSS6.2AI score0.83622EPSS
SaveIn wildExploits3References3Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/28 6:14 a.m.15 views

CVE-2026-24765

A flaw was found in PHPUnit, a testing framework for PHP. This vulnerability involves unsafe deserialization of code coverage data during PHPT test execution. An attacker with local file write access can exploit this by placing a malicious serialized object into the file system. This can lead to...

7.8CVSS6.3AI score0.00348EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2026/01/28 12:00 a.m.24 views

SolarWinds Web Help Desk code-related vulnerabilities

SolarWinds Web Help Desk is a service desk and asset management software provided by the American company SolarWinds. This software supports centralized knowledge bases, IT asset management, project and task management functions. There is a code vulnerability in SolarWinds Web Help Desk, which...

9.8CVSS7.8AI score0.83622EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
added 2026/01/28 12:00 a.m.8 views

PT-2026-5073

Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk versions prior to 2026.1 SolarWinds Web Help Desk versions 12.8.8 HF1 and earlier Description SolarWinds Web Help Desk is susceptible to an untrusted data deserialization vulnerability that allows for remote code...

10CVSS9.3AI score0.83622EPSS
SaveExploits3References133
Metasploit
Metasploit
added 2026/01/28 12:00 a.m.497 views

SolarWinds Web Help Desk unauthenticated RCE

This module exploits an access control bypass vulnerability CVE-2025-40536 and an unsafe deserialization vulnerability CVE-2025-40551 to achieve unauthenticated RCE against a vulnerable SolarWinds Web Help Desk WHD server. Module Options msf use exploit/multi/http/solarwinds/webhelpdeskrce msf...

9.8CVSS8.8AI score0.83622EPSS
SaveExploits4
CNNVD
CNNVD
added 2026/01/28 12:00 a.m.15 views

SolarWinds Web Help Desk code-related vulnerabilities

SolarWinds Web Help Desk is a service desk and asset management software provided by the American company SolarWinds. This software supports centralized knowledge bases, IT asset management, project and task management functions. There is a code vulnerability in SolarWinds Web Help Desk, which...

9.8CVSS7.8AI score0.6039EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/01/28 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-24765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PHPUnit is a testing framework for PHP. A vulnerability has been discovered in versions prior to 12.5.8, 11.5.50, 10.5.62, 9.6.33, and 8.5.52 involving unsafe...

7.8CVSS6.7AI score0.00348EPSS
SaveExploits0References2
Rows per page
Query Builder