Loading vulnerability…
Authenticated Command Injection in SolarWinds Dameware
CVE-2026-28336 is an authenticated command injection vulnerability affecting SolarWinds Dameware 2026.3 and all previous versions. An authenticated attacker can inject commands that could compromise a remotely controlled host. The vulnerability is rated Critical with a CVSS score of 9.9. The specific vulnerable function and injection parameter have not been identified.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation could compromise the remotely controlled host, with high impacts on confidentiality, integrity, and availability. The CVSS assessment indicates a changed security scope, meaning the impact can extend beyond the vulnerable component's security authority.
Patch, then assume compromise.
Upgrade SolarWinds Dameware to version 2026.3.1, released November 3, 2026, which fixes this vulnerability.
No public exploits tracked yet. Mallory keeps watching.
16 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.