CVE-2026-28336

SolarWinds Dameware command injection in remote support

critical · 9.9

Fix listed

SolarWinds Dameware

Published Nov 3, 2026, 16:23 UTC

Description

SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.

Reported fixed versions

2026.3.1

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.