The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security vulnerability affecting SolarWinds Web Help Desk (WHD) to its Known Exploited Vulnerabilities (KEV) catalog, indicating it is actively exploited in attacks. This vulnerability, designated CVE-2025-40551, has a CVSS score of 9.8 and involves untrusted data deserialization, which could allow for remote exploitation. Organizations using SolarWinds WHD are urged to take immediate action to mitigate risks. This highlights the ongoing threat landscape in cybersecurity and the need for vigilance.
