Sploitus

13 exploited vulnerabilities in Solarwinds Web Help Desk

Vulnerabilities with publicly known exploits

Vendors
Solarwinds
With known exploits
13
Affected Solarwinds Web Help Desk versions
< 2026.1, 12.8.3, 12.7.0
Affected Solarwinds Webhelpdesk versions
= 12.7.1, 12.7.0
Affected Solarwinds Help Desk versions
= 12.7.0

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2025-40553 1 exploit
CVSS 10.0 CRITICAL 2026-01-28
Exploit for CVE-2025-40552
CVE-2025-40552 1 exploit
CVSS 10.0 CRITICAL 2026-01-28FIX AVAILABLE
Exploit for CVE-2025-40552
CVE-2025-40536 4 exploits
CVSS 9.8 CRITICAL 2026-01-28FIX AVAILABLE
📄 SolarWinds Web Help Desk Access Control Bypass / Unsafe DeserializationSolarWinds Web Help Desk unauthenticated RCE
CVE-2024-28987 6 exploits
CVSS 9.4 CRITICAL 2024-08-21FIX AVAILABLE
Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_DeskExploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk
CVE-2019-20002
CVSS 7.8 HIGH 2020-04-27
CVE-2019-16959
CVSS 6.5 MEDIUM 2020-12-21FIX AVAILABLE
CVE-2019-16961
CVSS 5.4 MEDIUM 2021-01-15
CVE-2019-16960
CVSS 5.4 MEDIUM 2021-01-04
CVE-2019-16956
CVSS 5.4 MEDIUM 2021-01-04
CVE-2019-16954
CVSS 5.4 MEDIUM 2021-01-06FIX AVAILABLE
CVE-2019-16958
CVSS 5.4 MEDIUM 2020-12-01
CVE-2019-16957
CVSS 5.4 MEDIUM 2020-12-18
CVE-2019-16955
CVSS 5.4 MEDIUM 2020-12-18FIX AVAILABLE