Summary
| Parameter | Value |
|---|---|
| CVE ID | CVE-2026-28336 |
| Alert Source | GitHub Advisory - Critical Vulnerability |
| CVE Publication Year | 2026 |
| Date Published | 2026-11-03 |
| Vendor | SolarWinds |
| Product | Dameware |
| CVSS Score | 9.9 (critical) |
| EPSS Score | No data |
| CISA KEV | No |
| Ransomware | Not confirmed |
Vulnerability Description
SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required — the risk therefore comes from a compromised or malicious account with Dameware access, which can be used to move to the workstations and servers managed with the tool.
Required Actions
Update SolarWinds Dameware to version 2026.3.1 or later (release notes and SolarWinds advisory for CVE-2026-28336). Until you update, limit the accounts with Dameware access, enforce MFA for them and review remote session logs for unusual commands.
Who Is Affected?
The vulnerability affects Dameware by SolarWinds — a remote support and administration tool for workstations and servers used by IT departments and help desks. Check whether your organization or IT service provider uses Dameware older than 2026.3.1.
Sources
Need help securing your systems? nFlo team offers vulnerability management and 24/7 SOC services. Contact us.
