SolarWinds Web Help Desk Hardcoded Credentials CVE-2025-40537
CVE-2025-40537 Published on January 28, 2026

SolarWinds Web Help Desk Hardcoded Credentials Vulnerability
SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2025-40537 can be exploited with network access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
NETWORK
Attack Complexity:
HIGH
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

Use of Hard-coded Credentials

The software contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.


Products Associated with CVE-2025-40537

Want to know whenever a new CVE is published for SolarWinds Web Help Desk? stack.watch will email you.

SolarWinds Web Help Desk
 

Affected Versions

SolarWinds Web Help Desk Version 12.8.8 HF1 and below is affected by CVE-2025-40537

Exploit Probability

EPSS
0.01%
Percentile
0.75%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.