SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth Bypass

Back Thehackernews

SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth Bypass

Thehackernews •[email protected] (The Hacker News) • January 29, 2026

Share: View original

Discover how leading MSSPs use AI to automate security management, boost margins, and scale services without extra headcount.

Join cybersecurity leaders Kumar Saurabh and Francis Odum to learn how to build, buy, and automate smarter for a modern, efficient SOC.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Active Exploitation of SolarWinds Web Help Desk Vulnerability CVE-2025-40551 Users of SolarWinds Web Help Desk are at risk due to the active exploitation of vulnerability CVE-2025-40551. This vulnerability was published on January 28, 2026, and was added to CISA's Known Exploited Vulnerabilities Catalog on February 3, 2026, requiring federal civilian agencies to implement patches promptly. 75 sources 59

Extracted Entities

Platforms (1)