PlatformPlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
high·Product Based Web Vulnerabilities·Updated Feb 22, 2026

SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsurl
CostFree
3.1k
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVECVE-2025-40536
8.1
CVSShigh
Exploitable remotely over the internet · no authentication required.

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
Web Help Deskby SolarWinds
12.8.8 HF1 and below
Updated Sep 9, 2026View on NVD →
Similar Tools
critical
SolarWinds Web Help Desk < 2026.1 - Unauthenticated JNDI Injection RCE
→high
SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization
→medium
LearnPress < 4.3.0 - Arbitrary Callback Execution to Information Exposure
→medium
AKHQ Dashboard - Unauthenticated Access
→medium
SeaweedFS Filer - Unauthenticated Access
→medium
Trino Cluster Overview - Unauthenticated Dashboard Exposure
→high
Unauth Supervisor Dashboard - Detect
→high
Twonky Server 8.5.2 on Linux and Windows - Log File Exposure
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass CVE-2025-40536 Scanner | S4E