CVE-2025-40536

CVE

Threat entity extracted from intelligence sources

Frequency

5

occurrences

First Seen

January 29, 2026

Last Seen

January 29, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Active Exploitation of SolarWinds Web Help Desk Vulnerability CVE-2025-4055159.2

Users of SolarWinds Web Help Desk are at risk due to the active exploitation of vulnerability CVE-2025-40551. This vulnerability was published on January 28, 2026, and was added to CISA's Known Exploited Vulnerabilities Catalog on February 3, 2026, requiring federal civilian agencies to implement pa...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Active Exploitation of SolarWinds Web Help Desk Vulnerability CVE-2025-40551

Feb 5·75 sources

Related Articles (5)

Multiple Critical SolarWinds Web Help Desk Vulnerabilities: CVE-2025-40551, CVE

Security Patch: SolarWinds Web Help Desk Authentication Bypass

Heise.De·Jan 29

SolarWinds fixes critical Web Help Desk RCE vulnerabilities, upgrade ASAP!

Feeds2.Feedburner·Jan 29

Critical Solarwinds Web Vulnerability Allows Remote Code Execution and Security Bypass

Cybersecuritynews·Jan 29

SolarWinds, again: Critical RCE bugs reopen old wounds for enterprise security teams

Csoonline·Jan 29

Related Entities

Malware SolarWinds CVE-2025-40537 CVE-2025-40551 CVE-2025-40554 CVE-2025-40552 CVE-2025-40553 Government WebObjects SolarWinds Web Help Desk Web Help Desk