Solarwinds vulnerabilities

Products

• Serv-u 55
• Orion Platform 49
• Platform 42
• Access Rights Manager 33
• Access Rights Manager 32
• Platform 27
• Orion Platform 24
• Web Help Desk 22
• Serv-u File Server 20
• Web Help Desk 19
• Serv-u Ftp Server 11
• Database Performance Analyzer 10
• Observability Self-hosted 10
• N-central 9
• Orion Network Performance Monitor 9
• Network Performance Monitor 8
• Observability Self-hosted 8
• Webhelpdesk 8
• Dameware Mini Remote Control 7
• Network Configuration Manager 7
• Network Configuration Manager 7
• Tftp Server 6
• Kiwi Syslog Server 5
• Kiwi Syslog Server 5
• Log And Event Manager 5
• Dameware 4
• Database Performance Analyzer 4
• Observability Self-hosted 4
• Orion Web Performance Monitor 4
• Patch Manager 4
• Security Event Manager 4
• Log \& Event Manager 3
• Patch Manager 3
• Server And Application Monitor 3
• Sem 3
• Storage Manager 3
• Virtualization Manager 3
• Database Performance Analyzer (dpa) 2
• Ftp Voyager 2
• Kiwi Cattools 2

Show 8 moreShow less

• Kiwi Cattools 2
• Netpath 2
• Network Performance Monitor 2
• Orion 2
• Servu 2
• Serv-u Mft Server 2
• Sftp\/scp Server 2
• Solarwinds 2

Newest

• solarwinds dameware SolarWinds Dameware Command Injection Vulnerability CVE-2026-28336 9.9 CriticalNovember 3, 2026
• solarwinds dameware SolarWinds Dameware Buffer Overflow Vulnerability CVE-2026-28335 8.4 HighNovember 3, 2026
• solarwinds dameware SolarWinds Dameware DLL Hijacking Vulnerability CVE-2026-28327 8.2 HighNovember 3, 2026
• solarwinds observability self-hosted SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability CVE-2026-28330 4.6 MediumOctober 20, 2026
• solarwinds observability self-hosted SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF) CVE-2026-28329 6.4 MediumOctober 20, 2026
• solarwinds observability self-hosted SolarWinds Observability Self-Hosted broken authorization schema CVE-2026-28328 8.8 HighOctober 20, 2026
• solarwinds patch manager SolarWinds Patch Manager Sensitive Information Exposure Vulnerability CVE-2026-28331 4.4 MediumOctober 20, 2026
• solarwinds observability self-hosted SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability CVE-2026-28325 8.8 HighSeptember 22, 2026
• solarwinds observability self-hosted SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability CVE-2026-28324 9.8 CriticalSeptember 22, 2026
• solarwinds access rights manager SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability CVE-2026-28326 Public exploit 8.8 HighSeptember 17, 2026
• solarwinds web help desk SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability CVE-2026-28323 9.8 CriticalJuly 30, 2026
• solarwinds serv-u SolarWinds Serv-U Broken Access Control Vulnerability CVE-2026-28321 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability CVE-2026-28317 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability CVE-2026-28316 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) Vulnerability CVE-2026-28315 6.2 MediumJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability CVE-2026-28314 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability CVE-2026-28313 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Privilege Escalation Vulnerability CVE-2026-28312 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Privilege Escalation Vulnerability CVE-2026-28310 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Broken Access Control Vulnerability CVE-2026-28309 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability CVE-2026-28308 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Privilege Escalation Vulnerability CVE-2026-28307 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Privilege Escalation Vulnerability CVE-2026-28306 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability CVE-2026-28305 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Remote Code Execution Vulnerability CVE-2026-28304 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability CVE-2026-28302 9.1 CriticalJuly 21, 2026
• solarwinds database performance analyzer SolarWinds Database Performance Analyzer Stored Cross-Site Scripting Vulnerability CVE-2026-28322 5.6 MediumJune 30, 2026
• solarwinds observability self-hosted SolarWinds Observability Self-Hosted Open Redirect Vulnerability CVE-2026-28301 4.8 MediumJune 9, 2026
• solarwinds serv-u SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability CVE-2026-28318 In KEVPublic exploit EPSS 48.0% 7.5 HighJune 4, 2026
• solarwinds web help desk SolarWinds Web Help Desk Denial-of-Service Vulnerability CVE-2026-28299 8.2 HighJune 2, 2026
• serv-u ftp voyager FTP Voyager 16.2.0 Denial of Service via Malformed Site Profile CVE-2018-25252 6.9 MediumApril 4, 2026
• solarwinds observability self-hosted SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability CVE-2026-28298 5.9 MediumMarch 26, 2026
• solarwinds observability self-hosted SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability CVE-2026-28297 6.1 MediumMarch 26, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability CVE-2025-40541 9.1 CriticalFebruary 24, 2026
• solarwinds serv-u SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability CVE-2025-40540 9.1 CriticalFebruary 24, 2026
• solarwinds serv-u SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability CVE-2025-40539 9.1 CriticalFebruary 24, 2026
• solarwinds serv-u SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability CVE-2025-40538 9.1 CriticalFebruary 24, 2026
• solarwinds web help desk SolarWinds Web Help Desk Authentication Bypass Vulnerability CVE-2025-40554 Public exploit EPSS 60.6% 9.8 CriticalJanuary 28, 2026
• solarwinds web help desk SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-40553 EPSS 68.0% 9.8 CriticalJanuary 28, 2026
• solarwinds web help desk SolarWinds Web Help Desk Authentication Bypass Vulnerability CVE-2025-40552 Public exploit EPSS 52.0% 9.8 CriticalJanuary 28, 2026
• solarwinds web help desk SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-40551 In KEVPublic exploit EPSS 84.2% 9.8 CriticalJanuary 28, 2026
• solarwinds web help desk SolarWinds Web Help Desk Hardcoded Credentials Vulnerability CVE-2025-40537 7.5 HighJanuary 28, 2026
• solarwinds web help desk SolarWinds Web Help Desk Security Control Bypass Vulnerability CVE-2025-40536 In KEVPublic exploit EPSS 73.6% 8.1 HighJanuary 28, 2026
• solarwinds observability self-hosted SolarWinds Observability Self-Hosted Open Redirection Vulnerability CVE-2025-40545 4.8 MediumNovember 18, 2025
• solarwinds observability self-hosted SolarWinds Observability Self-Hosted XSS Vulnerability CVE-2025-26391 5.4 MediumNovember 18, 2025
• solarwinds serv-u SolarWinds Serv-U Path Restriction Bypass Vulnerability CVE-2025-40549 9.1 CriticalNovember 18, 2025
• solarwinds serv-u SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability CVE-2025-40548 9.1 CriticalNovember 18, 2025
• solarwinds serv-u SolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability CVE-2025-40547 9.1 CriticalNovember 18, 2025
• solarwinds observability self-hosted SolarWinds Observability Self-Hosted SQL Injection Vulnerability CVE-2025-26392 5.4 MediumOctober 21, 2025
• solarwinds web help desk SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability CVE-2025-26399 In KEVPublic exploit EPSS 90.6% 9.8 CriticalSeptember 23, 2025
• Show olderLoading…