Critical severity · published Jan 28, 2026
CVE-2025-40551
SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
In wildKEV
9.8
CVSS
84.2%
EPSS
Yes
On KEV
Description
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)84.2% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Feb 3, 2026
Federal remediation dueFeb 6, 2026
Ransomware campaign useNot known
Affected products
Which versions
WH
Web Help Desk · SolarWinds
12.8.8 HF1 and below · source: vendor, NVD, KEV
In the news
VulnerabilityHigh
[CISA KEV] CVE-2025-40551: SolarWinds Web Help Desk - SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
WHWeb Help DeskCVE-2025-40551
Feb 3, 2026·CISA KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-40551
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-40551
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
vendor-advisory
https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40551
release-notes
https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm
More from Web Help Desk
9.8
CVE-2025-40536
SolarWinds Web Help Desk Security Control Bypass Vulnerability
9.8
CVE-2025-26399
SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
9.8
CVE-2024-28986
SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
9.1
CVE-2024-28987
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
9.8
CVE-2026-28323
SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability