CVE-2026-28335
HighCVSS 8.4Summary
SolarWinds Dameware is affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required.
Risk Assessment
An authenticated attacker could exploit the buffer overflow to achieve remote code execution, potentially resulting in system compromise.
Recommendation
Apply the available SolarWinds Dameware updates and restrict privileges of accounts used for remote administration.
Other vulnerabilities in SolarWinds Dameware
See all- CVE-2026-28327High
SolarWinds Dameware is affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires access to the local machine and admin privileges.
- CVE-2026-28336Critical
SolarWinds Dameware is affected by a command injection vulnerability that could lead to compromise of the remotely controlled host. Authentication is required.
Original NVD description (English source)
SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS