Medium severity5.3NVD Advisory· Published Jul 29, 2025· Updated Jun 17, 2026
CVE-2025-26400
CVE-2025-26400
Description
SolarWinds Web Help Desk was reported to be affected by an XML External Entity Injection (XXE) vulnerability that could lead to information disclosure. A valid, low-privilege access is required unless the attacker had access to the local server to modify configuration files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:solarwinds:web_help_desk:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:solarwinds:web_help_desk:*:*:*:*:*:*:*:*range: <12.8.7
- (no CPE)
- (no CPE)range: 12.8.6 and previous versions
Patches
Vulnerability mechanics
References
2- www.solarwinds.com/trust-center/security-advisories/CVE-2025-26400nvdPatchVendor Advisory
- documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-8-7_release_notes.htmnvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.