CVE-2025-40554
CRITICAL EXPLOITED RANSOMWARE NUCLEISolarWinds Web Help Desk < 2026.1 - Authentication Bypass
Title source: llmExploitation Summary
CVE-2025-40554 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns. EIP tracks 2 public exploits from researchers including imbas007, Skynoxk. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a Python-based proof-of-concept exploit for CVE-2025-40554, an authentication bypass vulnerability in SolarWinds Web Help Desk. The exploit demonstrates session manipulation and login bypass techniques, with options for single or bulk target testing.
Description
SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.
Exploits (2)
This repository contains a Python-based proof-of-concept exploit for CVE-2025-40554, an authentication bypass vulnerability in SolarWinds Web Help Desk. The exploit demonstrates session manipulation and login bypass techniques, with options for single or bulk target testing.
This is a Python-based exploit for CVE-2025-40554, targeting SolarWinds Web Help Desk. It includes authentication bypass detection, automated login testing, and session management for further exploitation.
Nuclei Templates (1)
http.favicon.hash:"1895809524"
icon_hash="1895809524"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H