SolarWinds Web Help Desk Multiple Vulnerabilities
Release Date: 30 Jan 2026
RISK: Medium Risk
TYPE: Clients - Productivity Products
Multiple vulnerabilities were identified in SolarWinds Web Help Desk. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, elevation of privilege and security restriction bypass on the targeted system.
Impact
- Remote Code Execution
- Security Restriction Bypass
- Elevation of Privilege
System / Technologies affected
- SolarWinds Web Help Desk 12.8.8 HF1 and all previous versions
Solutions
Before installation of the software, please visit the software vendor web-site for more details.
Apply fixes issued by the vendor:
- Update to SolarWinds Web Help Desk version 12.8.8 HF1 or later
Vulnerability Identifier
Source
Related Link
- https://www.solarwinds.com/trust-center/security-advisories/cve-2025-40536
- https://www.solarwinds.com/trust-center/security-advisories/cve-2025-40537
- https://www.solarwinds.com/trust-center/security-advisories/cve-2025-40551
- https://www.solarwinds.com/trust-center/security-advisories/cve-2025-40552
- https://www.solarwinds.com/trust-center/security-advisories/cve-2025-40553
- https://www.solarwinds.com/trust-center/security-advisories/cve-2025-40554
沒有留言:
發佈留言