Multiple critical vulnerabilities in SolarWinds Web Help Desk (WHD), culminating in unauthenticated remote code execution (RCE) via Java deserialization in CVE-2025-40551, were uncovered by Horizon3.ai researchers. These flaws chain static credentials, security bypasses, and deserialization weaknesses, affecting versions prior to 2026.1. SolarWinds WHD, an IT service management platform for ticketing and asset tracking, has faced […]
The post Critical Solarwinds Web Vulnerability Allows Remote Code Execution and Security Bypass appeared first on Cyber Security News.
This article has been indexed from Cyber Security News
Read the original article: