SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.

This critical vulnerability affecting SolarWinds Web Help Desk has been reportedly exploited in the wild and should be remediated as soon as possible.

This critical vulnerability affecting SolarWinds Web Help Desk should be remediated as soon as possible. Solar Winds products have been highly targeted in the past

The version of SolarWinds WHD installed on the remote host is affected by multiple vulnerabilities :

- A Security Control Bypass that could allow an unauthenticated attacker to gain access to certain restricted functionality (CVE-2025-40536)

- An Unauthenticated JNDI Injection that allow remote unauthenticated attackers can exploit JNDI injection via the Apache Xalan JNDIConnectionPool class to achieve remote code execution (CVE-2025-40551)

- An Authentication Bypass that allow remote unauthenticated attackers to execute protected actions without authentication (CVE-2025-40552)

- An Authentication Bypass that allow a remote unauthenticated attacker to access to privileged administrative functions (CVE-2025-40554)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Solarwinds Web Help Desk installed on the remote host is prior to 2026.1. It is, therefore, affected by multiple vulnerabilities.

  - SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability   that could lead to remote code execution, which would allow an attacker to run commands on the host machine.
  This could be exploited without authentication. (CVE-2025-40551)

  - SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if   exploited, would allow a malicious actor to execute actions and methods that should be protected by   authentication. (CVE-2025-40552)

  - SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability   that could lead to remote code execution, which would allow an attacker to run commands on the host machine.
  This could be exploited without authentication. (CVE-2025-40553)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
115156	SolarWinds WHD < 2026.1 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	critical
297225	SolarWinds Web Help Desk < 2026.1 Multiple Vulnerabilities	Nessus	Misc.	Combined	critical

Detections

Analytics

CVE-2025-40551

critical

Tenable Plugins

critical

critical