{"id":"CVE-2025-40554","published":"2026-01-28T07:36:50Z","modified":"2026-02-26T15:04:48Z","title":"SolarWinds Web Help Desk Authentication Bypass Vulnerability","vendor":"SolarWinds","product":"Web Help Desk","tier":"core","eol":null,"affectedVersions":[{"vendor":"SolarWinds","product":"Web Help Desk","versions":["12.8.8 HF1 and below"]}],"description":{"text":"SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.","provenance":"source","from":"CVE.org"},"summary":{"text":"SolarWinds Web Help Desk contains an authentication bypass flaw in its authentication handling, classified as weak authentication. An attacker with network access can exploit it without credentials or user interaction to invoke specific actions within Web Help Desk.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:12:22Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.60642,"percentile":0.99146,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-05-01","exploitedFirstSeen":"2026-05-01","ransomware":true,"evidence":[{"url":"https://ctrlaltintel.com/research/Qilin/","date":"2026-05-01"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":null,"cwes":[{"id":"CWE-1390","name":"Weak Authentication"}],"references":[{"url":"https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40554","tags":["vendor-advisory","patch"]},{"url":"https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm","tags":["release-notes"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2025-206480","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-206480","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":2,"skipped":0,"earliest":"2026-01-29","earliestUrl":"https://github.com/imbas007/auth-bypass-CVE-2025-40554","repos":[{"name":"imbas007/auth-bypass-CVE-2025-40554","url":"https://github.com/imbas007/auth-bypass-CVE-2025-40554","stars":1,"created":"2026-01-29"},{"name":"Skynoxk/CVE-2025-40554","url":"https://github.com/Skynoxk/CVE-2025-40554","stars":1,"created":"2026-01-31"}]},"nuclei":[{"id":"CVE-2025-40554","name":"SolarWinds Web Help Desk - Authentication Bypass","severity":"critical","path":"http/cves/2025/CVE-2025-40554.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-40554.yaml"}],"first":{"date":"2026-01-29","source":"PoC-in-GitHub","url":"https://github.com/imbas007/auth-bypass-CVE-2025-40554"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2026-01-28","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2025-40554","provenance":"source"},{"date":"2026-01-29","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/imbas007/auth-bypass-CVE-2025-40554","provenance":"source"},{"date":"2026-05-01","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://ctrlaltintel.com/research/Qilin/","provenance":"source"}],"speed":{"daysToPublicExploit":1,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":81.7,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":5.0,"detail":"added 184 days ago"},{"name":"Known ransomware use","points":10.0,"detail":"VulnCheck KEV: Known"},{"name":"EPSS percentile","points":19.83,"detail":"percentile 0.9915"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 PoC-in-GitHub repos; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}