CVE coverage
View on NVD →
CVE-2025-40551
CVSS 9.8
Actively exploited (KEV)
2 detections found
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Suspicious SolarWinds Web Help Desk Java Module Load or Child Process | production | 2026-10-09 |
| sigma | Suspicious Child Process of SolarWinds WebHelpDesk | experimental | 2026-02-11 |