Vulnerability
CVE-2026-28336
SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.
CVSS score (v3.1)9.9Critical
Not on CISA KEV list
Am I affected?
Sign in and add the software you use to your watchlist: we check it against every new vulnerability.
Show me how to fix itTimeline
- Published by NVD
- First covered by RedTeamDaily
- Last updated by NVD
Coverage
Critical SolarWinds Dameware flaw CVE-2026-28336 lets authenticated attackers compromise hosts
SolarWinds has disclosed a critical command injection vulnerability in Dameware, tracked as CVE-2026-28336 with a CVSS score of 9.9. An authenticated attacker could remotely compromise the hosts Dameware controls. SolarWinds has released version 2026.3.1 to address it.
Sources: NVD and CISA known exploited vulnerabilities catalogue.