Critical Solarwinds Web Vulnerability Allows Remote Code Execution and Security Bypass

Cybersecuritynews •Guru Baran • January 29, 2026

Multiple critical vulnerabilities in SolarWinds Web Help Desk (WHD), culminating in unauthenticated remote code execution (RCE) via Java deserialization in CVE-2025-40551, were uncovered by Horizon3.ai researchers. These flaws chain static credentials, security bypasses, and deserialization weaknesses, affecting versions prior to 2026.1. SolarWinds WHD, an IT service management platform for ticketing and asset tracking, has faced […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Active Exploitation of SolarWinds Web Help Desk Vulnerability CVE-2025-40551 Users of SolarWinds Web Help Desk are at risk due to the active exploitation of vulnerability CVE-2025-40551. This vulnerability was published on January 28, 2026, and was added to CISA's Known Exploited Vulnerabilities Catalog on February 3, 2026, requiring federal civilian agencies to implement patches promptly. 76 sources 59

Extracted Entities

Critical Solarwinds Web Vulnerability Allows Remote Code Execution and Security Bypass

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (1)