CVE-2026-28336

SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead…

Risk score: 59/100
CVSS: 9.9 v3.1
Published: 3 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is: SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 9.9 critical

References

https://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htm
https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28336

Original description

SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.

Last activity 3 Nov 2026. Patch Forecast updates every hour.