SolarWinds Web Help Desk Authentication Bypass Vulnerability 

(CVE-2025-40552)

Download PDF

Summary

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected by authentication.

Affected Products

SolarWinds Web Help Desk 12.8.8 HF1 and all previous versions

Fixed Software Release

SolarWinds Web Help Desk 2026.1

Acknowledgments

Piotr Bazydlo working with watchTowr

Advisory Details

Severity

9.8 Critical

Advisory ID

First Published

01/28/2026

Fixed Version

CVSS Score