SolarWinds Dameware: Authenticated Command Injection (CVE-2026-28336)
SolarWinds Dameware is affected by a command injection vulnerability requiring authentication that could lead to the compromise of the remotely controlled host.
CVE search metadata
CVE search record: CVE-2026-28336. Severity: critical. CVSS: 9.9. KEV: no. Product: Dameware. Brief: SolarWinds Dameware: Authenticated Command Injection (CVE-2026-28336). Brief link: https://feed.craftedsignal.io/briefs/2026-11-solarwinds-dameware-command-injection/
Triage facts
Revision 2- Applicability
- Dameware
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 2 public sources
- Freshness
- Revision 2Nov 3, 21:28 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Revision history 1 entry · Revision 2
- Revision 2
poc_available
Changed: affected_products, affected_vendors, claim_state, cpes, has_poc, lastmod, poc_references, references, updates
Sources: 1
SolarWinds Dameware was found to be affected by a command injection vulnerability (CVE-2026-28336) that could lead to the compromise of the remotely controlled host. Authentication is required to exploit this vulnerability. The CVSS v3.1 base score is 9.9.