References https://horizon3.ai/attack-research/cve-2025-40551-another-solarwinds-web-help-desk-deserialization-issue/ https://www.solarwinds.com/trust-center/security-advisories/cve-2025-40551 https://www.huntress.com/blog/active-exploitation-solarwinds-web-help-desk-cve-2025-26399 https://cloud.tencent.com/developer/article/2549696 https://www.anquanke.com/post/id/299182 https://nvd.nist.gov/vuln/detail/CVE-2025-40551 https://www.rapid7.com/blog/post/etr-multiple-critical-solarwinds-web-help-desk-vulnerabilities-cve-2025-40551-40552-40553-40554/ https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28986 https://arcticwolf.com/resources/blog/multiple-critical-authentication-bypass-remote-code-execution-vulnerabilities-fixed-in-solarwinds-web-help-desk/ https://gugesay.com/archives/5296
Related VulnerabilitiesPoCCVE-2025-26399: SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCESolarwinds Web Help Desk /helpdesk/WebObjects/Helpdesk.woa 存在身份验证缺陷漏洞Solarwinds Web Help Desk /helpdesk/WebObjects/Helpdesk.woa 存在反序列化漏洞PoCCVE-2025-40552: SolarWinds Web Help Desk - Authentication BypassPoCCVE-2025-40536: SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control BypassPoCCVE-2025-40551: SolarWinds Web Help Desk < 2026.1 - Unauthenticated JNDI Injection RCEPoCCVE-2025-40554: SolarWinds Web Help Desk - Authentication BypassSolarWinds Web Help Desk 代码执行漏洞(CVE-2025-40536/CVE-2025-40551)PoCCVE-2024-28986: SolarWinds Web Help Desk < 12.8.3 - Insecure DeserializationPoCCVE-2018-19386: SolarWinds Database Performance Analyzer 11.1.457 - Cross-Site ScriptingPoCCVE-2020-10148: SolarWinds Orion API - Auth BypassPoCCVE-2021-35250: SolarWinds Serv-U 15.3 - Directory TraversalPoCCVE-2024-0692: SolarWinds Security Event Manager - Unauthenticated RCE