CVE-2025-40552

Katalog CVE

CVSS 9.8 · Critical EPSS 52,0%

Kerentanan Weak Authentication pada solarwinds web help desk. Skor CVSS 3.1 9.8 (Critical) menurut solarwinds.com.

Deskripsi (NVD)

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected by authentication.

Rincian

Terbit di NVD

28 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber solarwinds.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1390: Weak Authentication

EPSS (30 hari)

52,0% peluang dieksploitasi; lebih tinggi dari 98,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40552 advisory vendor
• https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm release notes
• https://github.com/watchtowrlabs/watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553/blob/main/w...