SolarWinds Web Help Desk Vulnerability Actively Exploited

CISA has warned that SolarWinds Web Help Desk contains four critical vulnerabilities (notably CVE-2025-40551, a deserialization RCE) with CVSS scores of 9.8; at least CVE-2025-40551 is being actively exploited, prompting a KEV listing and an urgent patching directive for federal agencies — SolarWinds urges customers to upgrade to Web Help Desk 2026.1 to mitigate risks including admin takeover, lateral movement, data theft and ransomware.