CVE-2025-40551
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
Published Jan 28, 2026 · updated Jun 17, 2026 · SolarWinds Web Help Desk
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
Timeline
Detection, updates, and resolution for this record.
Jan 28, 2026 · Catalog
Detected
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
Feb 3, 2026 · CISA KEV
Known exploited
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Feb 6, 2026 · CISA KEV
Remediation due
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Jun 17, 2026 · Catalog
Updated
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA due date Feb 6, 2026
Affected
- cpe solarwinds/web help deskversion unspecified
- vendor SolarWinds Web Help Deskversion unspecified
Sources
- CISA KEVCVE-2025-40551
SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
cisa.gov - CVE.orgCVE-2025-40551
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-40551
30-day exploitation probability 84.2%
first.org - Metasploit Modulesexploit_multi/http/solarwinds_webhelpdesk_rce
Public module reference (great). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2025-40551
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
nvd.nist.gov