Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-26393

SolarWinds Service Desk Broken Access Control Vulnerability

Description

SolarWinds Service Desk is affected by a broken access control vulnerability. The issue allows authenticated users to escalate privileges, leading to unauthorized data manipulation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SolarWinds Service Desk

Default version status: unaffected

  • 01-28-2025affected

References