Skip to content
OpenAdvisories
High · 7.5 CVE-2025-40537 EUVD-2025-206422GHSA-r5hj-w659-pg8p

SolarWinds Web Help Desk Hardcoded Credentials Vulnerability

Published Jan 28, 2026 · Updated Feb 26, 2026 · Assigned by SolarWinds

Description

SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions.

Affected products

VendorProductAffectedFixed
SolarWinds Web Help Desk 12.8.8 HF1 and below —

Advisories 2

References