CVE-2026-28336

CVSS 9.9 (critical) · published 2026-11-03

SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.

Weakness: CWE-20

Source: NVD CVE-2026-28336

References

• https://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htm
• https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28336

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.