170+ SolarWinds Help Desk Installations Vulnerable to RCE Attacks Exposed Online

Cybersecuritynews •Guru Baran • February 5, 2026

Over 170 SolarWinds Web Help Desk installations remain vulnerable to a critical remote code execution (RCE) flaw that has been actively exploited in the wild and recently added to CISA’s Known Exploited Vulnerabilities catalog. The vulnerability, tracked as CVE-2025-40551, carries a CVSS score of 9.8 and allows unauthenticated attackers to execute arbitrary commands on affected […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Active Exploitation of SolarWinds Web Help Desk Vulnerability CVE-2025-40551 Users of SolarWinds Web Help Desk are at risk due to the active exploitation of vulnerability CVE-2025-40551. This vulnerability was published on January 28, 2026, and was added to CISA's Known Exploited Vulnerabilities Catalog on February 3, 2026, requiring federal civilian agencies to implement patches promptly. 76 sources 59

Extracted Entities

170+ SolarWinds Help Desk Installations Vulnerable to RCE Attacks Exposed Online

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (2)

Platforms (1)