SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific ac…

SolarWinds Web Help Desk contains an authentication bypass vulnerability that allows attackers to invoke specific actions within the application without proper authentication. This vulnerability affects the Web Help Desk product and could potentially allow unauthorized access to administrative functions. The vulnerability has been assigned CVE-2025-40554 and security advisories have been published by SolarWinds. Release notes for version 2026-1 are available indicating a fix may be included in that version.