CISA Mandates Immediate Patching for Actively Exploited SolarWinds Web Help Desk RCE Flaw

#cybersecurity #infosec

Summary

CISA reports active exploitation of a critical flaw in SolarWinds Web Help Desk software (CVE-2025-40551). CISA has mandated that federal agencies apply the update within three days.

Take Action:

If you are using Web Help Desk, this is urgent and important. Your Solar Web Help Desk is under attack. If your process allows for it, isolate Web Help Desk from the internet, then plan a quick update. If you can't isolate from the internet, patch now!

Read the full article on BeyondMachines

This article was originally published on BeyondMachines