SolarWinds Web Help Desk Security Control Bypass Vulnerability

概要

参考情報

• documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm · Release Notes
• solarwinds.com/trust-center/security-advisories/CVE-2025-40536 · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• huntress.com/blog/active-exploitation-solarwinds-web-help-desk-cve-2025-26399 · Third Party Advisory
• CISA KEV · CVE-2025-40536

web help desk のその他の脆弱性

• CVE-2026-28323緊急 9.8SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication me…
• CVE-2026-28299高 7.5SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk s…
• CVE-2025-40554緊急 9.8SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker t…
• CVE-2025-40553緊急 9.8SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execu…
• CVE-2025-40552緊急 9.8SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious ac…