CVE-2026-28336 SolarWinds Dameware Command Injection Vulnerability
CriticalCVSS 9.9
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| solarwinds Dameware | <= 2026.3 | No fix listed |
References
- documentation.solarwinds.com release-notes
- www.solarwinds.com vendor-advisory