CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–1 of 1 advisories (Page 1/1)

CVE-2025-405368.1/HIGHEPSS 73.6%CISA KEV

2026-01-28

SolarWinds Web Help Desk Security Control Bypass Vulnerability (CVE-2025-40536) Urgent Security Advisory

[Affected Scope] All SolarWinds Web Help Desk (WHD) versions prior to 2026.1.

[Impact] Unauthenticated remote attackers can bypass internal security controls, gaining unauthorized access to restricted functionalities and sensitive data.

[Mitigation] Immediately upgrade to the latest secure version (2026.1 or higher) and restrict external access until patched.

CISA-KEV security-control-bypass unauthenticated-access CWE-693 kev-active-exploitation

Full Advisory & Mitigation