CVE-2025-40553 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would al…
Critical CVSS: 9.8

CVE-2025-40553

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
Vendor
Solarwinds
Product
Web Help Desk
CWE
CWE-502
Yayın Tarihi
2026-01-28 08:16:02
Güncelleme
2026-02-26 19:30:48
Source Identifier
psirt@solarwinds.com
KEV Date Added
-

Kategoriler

CWE-502 Web Help Desk CRITICAL Solarwinds 2026

Referanslar

https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40553 https://github.com/watchtowrlabs/watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553/blob/main/watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553.py