Solarwinds Whd Pre Auth Page Restoration Bypass

nomit vyas@xoxo

•updated Mar 9, 2026•4•0•95

Detects attempts to bypass authentication in SolarWinds Web Help Desk by exploiting the page restoration mechanism (CVE-2025-40552, CVE-2025-40554). An attacker can specify a sensitive page via the 'wopage' parameter to gain access to post-authentication functionality without valid credentials.