exploit/multi/http/solarwinds_webhelpdesk_rce

weaponized

SolarWinds Web Help Desk unauthenticated RCE

view exploit source metasploittype exploitpublished 2026-01-28catalog metasploit
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-40551US—OT criticalKEV
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to r…
CVE-2025-40536UScritical9.8OT criticalKEV
SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan