Vulnerability in SolarWinds Dameware

[ Why it matters ]Priority signals

• Critical severity: CVSS 9.9

[ Description ]Official description

SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.

[ Fixes ]Fixes and patches

• Security bulletin: SolarWinds cve-2026-111497Vendor patch or bulletin · CERT-FR · solarwinds.com/trust-center/security-advisories/cve-2026-111497, cited by CERT-FR CERTFR-2026-AVI-1459
• Security bulletin: SolarWinds cve-2026-28335Vendor patch or bulletin · CERT-FR · solarwinds.com/trust-center/security-advisories/cve-2026-28335, cited by CERT-FR CERTFR-2026-AVI-1459
• Security bulletin: SolarWinds cve-2026-28336Vendor patch or bulletin · CERT-FR · solarwinds.com/trust-center/security-advisories/cve-2026-28336, cited by CERT-FR CERTFR-2026-AVI-1459
• Security bulletin: SolarWinds cve-2026-28327Vendor patch or bulletin · CERT-FR · solarwinds.com/trust-center/security-advisories/cve-2026-28327, cited by CERT-FR CERTFR-2026-AVI-1459

[ Advisories ]Government CERT advisories

• CERT-FR4 Nov 2026CERTFR-2026-AVI-1459

  Multiple vulnerabilities in SolarWinds Dameware Translated from French

  Multiple vulnerabilities have been discovered in SolarWinds Dameware. They allow an attacker to cause remote arbitrary code execution and a security policy bypass.

  CVE-2026-28335CVE-2026-28336CVE-2026-28327
• BSI CERT-Bund3 Nov 2026WID-SEC-2026-4311

  SolarWinds Dameware: Multiple vulnerabilities Translated from German

  Risk highCVE-2026-28327CVE-2026-28335CVE-2026-28336

[ References ]References

• documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_…
• www.solarwinds.com/trust-center/security-advisories/CVE-2026-28336