Unrated severityNVD Advisory· Published Jul 29, 2025· Updated Jul 29, 2025
SolarWinds Web Help Desk XML External Entity Injection (XXE) Vulnerability
CVE-2025-26400
Description
SolarWinds Web Help Desk was reported to be affected by an XML External Entity Injection (XXE) vulnerability that could lead to information disclosure. A valid, low-privilege access is required unless the attacker had access to the local server to modify configuration files.
Affected products
2- SolarWinds/Web Help Deskv5Range: 12.8.6 and previous versions
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.