SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected by authentication.

This critical vulnerability affecting SolarWinds Web Help Desk should be remediated as soon as possible. Solar Winds products have been highly targeted in the past

Multiple Vulnerabilities in SolarWinds Web Help Desk

SolarWinds WHD version prior to 2026.1 contains a critical authentication bypass vulnerability that allows unauthenticated attackers to gain unauthorized access to the system, potentially leading to data breaches and system compromise.

The version of SolarWinds WHD installed on the remote host is affected by multiple vulnerabilities :

 - A Security Control Bypass that could allow an unauthenticated attacker to gain access to certain restricted functionality (CVE-2025-40536)

 - An Unauthenticated JNDI Injection that allow remote unauthenticated attackers can exploit JNDI injection via the Apache Xalan JNDIConnectionPool class to achieve remote code execution (CVE-2025-40551)

 - An Authentication Bypass that allow remote unauthenticated attackers to execute protected actions without authentication (CVE-2025-40552)

 - An Authentication Bypass that allow a remote unauthenticated attacker to access to privileged administrative functions (CVE-2025-40554)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Solarwinds Web Help Desk installed on the remote host is prior to 2026.1. It is, therefore, affected by multiple vulnerabilities.

  - SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability   that could lead to remote code execution, which would allow an attacker to run commands on the host machine.
  This could be exploited without authentication. (CVE-2025-40551)

  - SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if   exploited, would allow a malicious actor to execute actions and methods that should be protected by   authentication. (CVE-2025-40552)

  - SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability   that could lead to remote code execution, which would allow an attacker to run commands on the host machine.
  This could be exploited without authentication. (CVE-2025-40553)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
115157	SolarWinds WHD < 2026.1 Authentication Bypass	Web App Scanning	Component Vulnerability	critical
115156	SolarWinds WHD < 2026.1 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	critical
297225	SolarWinds Web Help Desk < 2026.1 Multiple Vulnerabilities	Nessus	Misc.	critical

Detections

Analytics

CVE-2025-40552

critical

Tenable Plugins

Coming Soon

critical

critical

critical