Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

CISA KEV remediation deadline for SolarWinds WHD CVE-2025-40551

Public Sector Action
First reported
Last updated
Happening score
H score 53
1 unique sources, 1 articles

Summary

Hide ▲

CISA added CVE-2025-40551 in SolarWinds Web Help Desk to the KEV catalog and imposed federal remediation deadlines, turning a newly exploited flaw into a compliance requirement for FCEB agencies. The vulnerability can enable unauthenticated remote code execution, which raises the risk of compromise across affected government systems. SolarWinds released fixes for the issue in WHD version 2026.1, alongside several related CVEs. FCEB agencies must meet the deadline under BOD 22-01 or remain out of compliance.

Related Happenings

NHS England Digital libssh2 update advisory for CVE-2026-55200

Advisory/Mitigation
H score38 First: 29.06.2026 10:06 Last: 29.06.2026 10:06 Sources 1

About this happening: NHS England Digital has issued an update advisory for libssh2 after a public proof-of-concept surfaced for CVE-2026-55200. The flaw can let a malicious or compro...

Open Happening

CISA adds CVE-2026-12569 to KEV for PTC Windchill and FlexPLM

Public Sector Action
H score46 First: 26.06.2026 15:31 Last: 26.06.2026 15:31 Sources 1

About this happening: CISA added CVE-2026-12569 to the KEV catalog after finding active exploitation of PTC Windchill PDMlink and PTC FlexPLM, elevating the flaw to a federal remedi...

Open Happening

Lantronix EDS5000 Series devices code-injection flaw (CVE-2025-67038)

Vulnerability
H score43 First: 24.06.2026 20:19 Last: 24.06.2026 20:19 Sources 1

About this happening: CVE-2025-67038 in Lantronix EDS5000 Series devices is now under active exploitation, creating a root-level command execution risk for affected systems. CISA to...

Open Happening

Widget Factory Joomla Content Editor JCE actively exploited improper access control security flaw (CVE-2026-48907)

Vulnerability
H score89 First: 17.06.2026 08:50 Last: 17.06.2026 08:50 Sources 1

About this happening: The Widget Factory Joomla Content Editor (JCE) flaw CVE-2026-48907 has been added to CISA's KEV catalog after evidence of active exploitation, putting affected Joo...

Open Happening

SimpleHelp security update for CVE-2026-48558

Security Patch Release
H score65 First: 15.06.2026 23:06 Last: 15.06.2026 23:06 Sources 1

About this happening: SimpleHelp released 5.5.16 and 6.0 RC2 on June 9 to fix CVE-2026-48558, a critical OIDC authentication flaw in SimpleHelp remote management software th...

Open Happening

Timeline

  1. 04.02.2026 07:50 2 articles · 5mo ago

    CISA adds SolarWinds WHD CVE-2025-40551 to KEV and sets federal deadlines

    Legal Policy Action Update

    CISA added CVE-2025-40551 in SolarWinds Web Help Desk to the Known Exploited Vulnerabilities catalog after classifying it as actively exploited, warned that the unauthenticated deserialization flaw could enable remote code execution on the host machine, and required Federal Civilian Executive Branch agencies to remediate CVE-2025-40551 by February 6, 2026 and the remaining WHD fixes by February 24, 2026 under BOD 22-01.

    Show sources
    Open in new tab