CVE-2026-28336
CriticalCVSS 9.9Summary
SolarWinds Dameware is affected by a command injection vulnerability that could lead to compromise of the remotely controlled host. Authentication is required.
Risk Assessment
An authenticated attacker could execute arbitrary commands on a remotely managed host, potentially resulting in full compromise of the endpoint.
Recommendation
Apply the available SolarWinds Dameware updates and restrict privileges of accounts used for remote administration.
Other vulnerabilities in SolarWinds Dameware
See all- CVE-2026-28335High
SolarWinds Dameware is affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required.
- CVE-2026-28327High
SolarWinds Dameware is affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires access to the local machine and admin privileges.
Original NVD description (English source)
SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS