{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2025-40536/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2025-40536/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2025-40536/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2025-40536/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2025-40536/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2025-40536"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2025-40536"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": true
    },
    "epss": {
      "epss": 0.8196,
      "kev": true,
      "percentile": 0.99635
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2025/CVE-2025-40536.yaml",
      "nuclei_template_severity": "high",
      "nuclei_template_yaml": "id: CVE-2025-40536\n\ninfo:\n  name: SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass\n  author: inokii\n  severity: high\n  description: |\n    SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.\n  impact: |\n    Attackers can gain access to certain restricted functionality.\n  remediation: |\n    Apply the available 12.8.8 Hotfix 1 (HF1) or upgrade to version 2026.1.\n  reference:\n    - https://www.solarwinds.com/trust-center/security-advisories/cve-2025-40536\n    - https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm\n    - https://horizon3.ai/attack-research/cve-2025-40551-another-solarwinds-web-help-desk-deserialization-issue/\n  classification:\n    cve-id: CVE-2025-40536\n    epss-score: 0.8196\n    epss-percentile: 0.99635\n    cvss-metrics: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 8.1\n    cwe-id: CWE-693\n    cpe: cpe:2.3:a:solarwinds:web_help_desk:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: solarwinds\n    product: web_help_desk\n    shodan-query: http.favicon.hash:\"1895809524\"\n  tags: cve,cve2025,solarwinds,webhelpdesk,kev,vkev,passive\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/helpdesk/WebObjects/Helpdesk.woa\"\n\n    host-redirects: true\n    max-redirects: 2\n\n    extractors:\n      - type: regex\n        name: build_token\n        part: body\n        group: 1\n        regex:\n          - \"\\\\?v=([0-9]+_[0-9]+_[0-9]+_[0-9]+)\"\n        internal: true\n\n      - type: dsl\n        name: version\n        dsl:\n          - \"replace(build_token, '_', '.')\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        words:\n          - \"Web Help Desk Software\"\n          - \"SolarWinds WorldWide\"\n          - \"/WebObjects/Helpdesk.woa\"\n        condition: or\n\n      - type: dsl\n        dsl:\n          - \"compare_versions(version, '< 12.8.8.2585')\"\n# digest: 4a0a0047304502200b7d932b573fd9286cb3a8c57570aca9a8ce88261738570ee8c2c0c6f471347d022100ffcdaf0e878994cec23561a4631c6221c6d5f772f6566603b9c874117d1a3ef3:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2025-40536"
}