{"id":"CVE-2025-40536","aliases":["EUVD-2025-206418","GHSA-m83h-48rr-jcrh"],"status":"published","title":"SolarWinds Web Help Desk Security Control Bypass Vulnerability","description":"SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.73562,"percentile":0.99473,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-693"],"published":"2026-01-28T07:30:09Z","modified":"2026-06-17T09:21:43Z","kev":{"date_added":"2026-02-12","due_date":"2026-02-15","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2026-02-12"},{"source":"kev","since":"2026-02-12"}],"exploits":[{"source":"metasploit","id":"exploit/multi/http/solarwinds_webhelpdesk_rce","title":"SolarWinds Web Help Desk unauthenticated RCE","type":"exploit","platform":"Linux,Unix,Windows","date":"2026-01-28","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/http/solarwinds_webhelpdesk_rce"},{"source":"pocgithub","id":"victoriaalicex/CVE-2025-40536-Analysis","title":"victoriaalicex/CVE-2025-40536-Analysis","date":"2026-06-01","url":"https://github.com/victoriaalicex/CVE-2025-40536-Analysis"},{"source":"nuclei","id":"CVE-2025-40536","title":"SolarWinds Web Help Desk \u003c 12.8.8 Hotfix 1 (HF1) - Security Control Bypass","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-40536.yaml"}],"products":[{"vendor":"solarwinds","product":"web help desk"},{"vendor":"solarwinds","product":"web_help_desk"}],"references":[{"url":"https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40536","tags":["vendor-advisory","patch","Vendor Advisory"]},{"url":"https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm","tags":["release-notes","Release Notes"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-40536","tags":["government-resource","US Government Resource"]},{"url":"https://www.huntress.com/blog/active-exploitation-solarwinds-web-help-desk-cve-2025-26399","tags":["third-party-advisory","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40536"},{"url":"https://github.com/advisories/GHSA-m83h-48rr-jcrh"}],"sources":{"cve":[{"id":"CVE-2025-40536","title":"SolarWinds Web Help Desk Security Control Bypass Vulnerability","description":"SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.","status":"published","published":"2026-01-28T07:30:09.503Z","modified":"2026-02-26T15:04:49.7Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T14:32:34.434755Z"}],"euvd":[{"id":"EUVD-2025-206418","description":"SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.","status":"published","published":"2026-01-28T07:30:09Z","modified":"2026-02-26T15:04:49Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2026-02-12","updated_at":"2026-11-02T19:48:26.495238Z"}],"ghsa":[{"id":"GHSA-m83h-48rr-jcrh","title":"SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability...","description":"SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.","status":"published","published":"2026-01-28T09:30:30Z","modified":"2026-02-12T21:32:29Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T15:06:11.78432Z"}],"kev":[{"id":"CVE-2025-40536","title":"SolarWinds Web Help Desk Security Control Bypass Vulnerability","description":"SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauthenticated attacker to gain access to certain restricted functionality.","cwes":["CWE-693"],"kev":{"date_added":"2026-02-12","due_date":"2026-02-15","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:15.999436Z"}],"nvd":[{"id":"CVE-2025-40536","description":"SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.","status":"published","published":"2026-01-28T08:16:01.893Z","modified":"2026-06-17T09:21:43.41Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T14:11:59.073638Z"}]}}