PoC Index

CVE-2025-40553

CRITICAL 9.8EPSS 60.4%

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.

CVSS v3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
60.39% chance of exploitation in the next 30 days, 99th percentile
Published
2026-01-28
Updated
2026-02-27

Proof-of-concept exploits (1)

References

Related