Critical SolarWinds Web Help Desk bug under attack
Attackers exploit SolarWinds Web Help Desk deserialization flaw CVE-2025-40551 enabling remote code execution; federal agencies given a three-day emergency patch deadline.
CISA Adds Actively Exploited SolarWinds Web Help Desk RCE to KEV Catalog
A critical untrusted-data deserialization vulnerability in SolarWinds Web Help Desk (CVE-2025-40551) enables unauthenticated remote code execution and is actively exploited.
CISA Adds Actively Exploited SolarWinds Web Help Desk RCE to KEV Catalog
A critical untrusted-data deserialization vulnerability in SolarWinds Web Help Desk (CVE-2025-40551) enables unauthenticated remote code execution and is actively exploited.
