CVE-2025-26400
SolarWinds Web Help Desk XML External Entity Injection (XXE) Vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
SolarWinds Web Help Desk XML External Entity Injection (XXE) Vulnerability
SolarWinds Web Help Desk was reported to be affected by an XML External Entity Injection (XXE) vulnerability that could lead to information disclosure. A valid, low-privilege access is required unless the attacker had access to the local server to modify configuration files.
Reserved 2025-02-08 | Published 2025-07-29 | Updated 2025-07-29 | Assigner SolarWindsCWE-611 Improper Restriction of XML External Entity Reference
DieuLink, Nhiephon, and chung96vn from GCSC Vietnam
www.solarwinds.com/...ter/security-advisories/CVE-2025-26400
documentation.solarwinds.com/...whd_12-8-7_release_notes.htm
Support options
