CVE-2026-28336

SolarWinds Dameware

Published 3 Nov 2026 · updated 3 Nov 2026 · Received

9.9 Critical · CVSS 3.1, solarwinds.com

Description

SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.

References

documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htm
www.solarwinds.com/trust-center/security-advisories/CVE-2026-28336