Ref# ADV2026_78 | Date: Feb 14th 2026

---

 

SolarWinds published a security advisory highlighting vulnerabilities in the following products on 28, 2026. It is recommended that you take the necessary precautions by ensuring your products are always updated.

• SolarWinds Web Help Desk – versions prior to 2026.1
• SolarWinds Web Help Desk – version 12.8.8 HF1 and prior

Update 1

On February 3, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-40551 to their Known Exploited Vulnerabilities (KEV) Database.

Update 2

On February 12, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-40536 to their Known Exploited Vulnerabilities (KEV) Database.

For more information on these updates, you can follow these URLs:

• SolarWinds Security Vulnerabilities
• CISA KEV: CVE-2025-40551
• CISA KEV: CVE-2025-40536

The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary.

PDF Download: SolarWinds Security Advisory_Update_2

References

• SolarWinds Security Advisory (February 13^th, 2026). Retrieved from SolarWinds. https://www.solarwinds.com/trust-center/security-advisories
• CVE-2025-40551 (February 3^rd, 2026). Retrieved from SolarWinds. https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-40551

• CVE-2025-40536 (February 13^th, 2026). Retrieved from SolarWinds https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-40536
• SolarWinds security advisory. (February 13^th, 2026). (January 28, 2026). Retrieved from Canadian Centre for Cyber Security. https://www.cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-063-update-1