SolarWinds Dameware Command Injection Vulnerability (CVE-2026-28336)
Summary
SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.
Affected Products
SolarWinds Dameware 2026.3 and all previous versions
Fixed Software Release
Acknowledgments
Greg Bernatowicz on the Boeing Enterprise Security Red Team
Advisory Details
Severity
9.9 Critical
Advisory ID
First Published
11/03/2026
Fixed Version