Critical · 1 source · latest 1h

Critical SolarWinds Dameware flaw CVE-2026-28336 lets authenticated attackers compromise hosts

CRITICAL · VULNERABILITYCVE-2026-28336redteam/daily · 1 source

Severity: Critical
Highest CVSS: 9.9
Exploited: Not known
Sources: 1

What happened

SolarWinds has disclosed a critical command injection vulnerability in Dameware, tracked as CVE-2026-28336 with a CVSS score of 9.9. An authenticated attacker could remotely compromise the hosts Dameware controls. SolarWinds has released version 2026.3.1 to address it.

For IT people · Written by AI from 1 source · Wrong?

What to do

Update Dameware to version 2026.3.1 or later, as released by SolarWinds.
Check whether your organisation runs Dameware 2026.3 or any earlier version.

Written by AI from the sources, checked against them

Read the full story at the source

Vulnerabilities

CVE-2026-28336CVSS 9.9SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.

Full story timeline · 2 updates

Tue 3 November17:18CVE-2026-28336 published, CVSS 9.9NVD
Wed 4 November05:06Critical SolarWinds Dameware Vulnerability Enables Attackers to Take Control of Remote SystemsGBHackers

Who reported · 1 outlet

GBHackers