Dameware
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Vulnerability reported by Canadian Centre for Cyber SecuritySolarWinds advisory AV26-1124 flags vulnerabilities in Dameware 2026.3.1 and earlier
- Vulnerability reported by GBHackersCritical SolarWinds Dameware flaw CVE-2026-28336 allows remote host compromise
Recent news
SolarWinds advisory AV26-1124 flags vulnerabilities in Dameware 2026.3.1 and earlier
SolarWinds advisory AV26-1124, published on 4 November 2026 and reported by the Canadian Centre for Cyber Security, states that Dameware versions prior to or equal to 2026.3.1 are affected by vulnerabilities. The Cyber Centre urges users and administrators to review the linked release notes and security vulnerability pages and apply updates as they become available.
Critical SolarWinds Dameware flaw CVE-2026-28336 allows remote host compromise
SolarWinds has disclosed CVE-2026-28336, a critical command injection flaw in Dameware remote support software, with a CVSS score of 9.9. It affects Dameware 2026.3 and all earlier versions, and the fix is 2026.3.1, published on November 3, 2026. The attacker needs low-privileged authenticated access over the network, and the advisory reports no malware or attacks in the wild.