CVE-2026-28336 — Vulnerability intelligence

SolarWinds — Dameware

Published: 2026-11-03T16:23:19.664Z

CVSS

9.9

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.

Sources

• CVE-2026-28336
• Original advisory
• Original advisory
• CVE-2026-28336