CVE coverage
View on NVD →
CVE-2025-40536
CVSS 8.1
Actively exploited (KEV)
2 detections found
SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Suspicious SolarWinds Web Help Desk Java Module Load or Child Process | production | 2026-10-09 |
| sigma | Suspicious Child Process of SolarWinds WebHelpDesk | experimental | 2026-02-11 |