{"id":"CVE-2020-10148","kind":"vulnerability","aliases":["CVE-2020-10148"],"related":[],"title":"SolarWinds Orion: SolarWinds Orion Authentication Bypass Vulnerability","description":"The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.","summary":"SolarWinds Orion API has an authentication bypass that lets a remote attacker run API commands without logging in. It is on CISA's known-exploited list and EPSS rates exploitation probability at 0.920.","severity":"critical","cvss":9.8,"epss":0.9198,"exploited":true,"exploited_at":"2021-11-03T00:00:00+00:00","products":[{"name":"SolarWinds Orion","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","package","self-hosted","solarwinds-orion","windows"],"not_affected_if":["not-running-orion"],"how_to_check":null,"fix":"Apply updates per vendor instructions; the sources do not name the fixed Orion version.","status":"open","published_at":"2020-12-29T22:15:12+00:00","first_seen_at":"2026-10-23T19:11:53+00:00","triaged_at":"2026-10-23T21:41:24+00:00","updated_at":"2026-10-23T21:57:34+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-23T21:41:24Z","model":"claude-haiku-5-5","output":{"fix":"Apply updates per vendor instructions; the sources do not name the fixed Orion version.","reach":"internet","impact":"high","summary":"SolarWinds Orion API has an authentication bypass that lets a remote attacker run API commands without logging in. It is on CISA's known-exploited list and EPSS rates exploitation probability at 0.920.","category":"package","who_cares":["solarwinds-orion","self-hosted","windows"],"confidence":0.6,"needs_auth":"no","worst_case":"Remote attacker runs Orion API commands without credentials, possibly taking over the server.","analyst_note":"Find the fixed Orion version and the affected version range from the SolarWinds advisory for CVE-2020-10148 and CISA's KEV entry; the sources give neither.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["not-running-orion"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000454,"input_tokens":2822,"output_tokens":343,"severity_before":"unknown"},"analyst_status":"queued","analyst_note":"Find the fixed Orion version and the affected version range from the SolarWinds advisory for CVE-2020-10148 and CISA's KEV entry; the sources give neither.","search":"'-10148':10A,13A '-2020':9A,12A '0.920':58B '1':118C '2019.4':107C '2020.2':110C,116C '5':109C 'affect':120C 'allow':71C,82C 'api':27B,38B,62C,77C,91C 'attack':36B,74C,85C 'authent':5A,30B,67C,88C 'bypass':6A,31B,68C,87C 'cisa':46B 'command':39B,78C,92C 'compromis':98C 'could':70C,81C 'cve':8A,11A 'epss':53B 'execut':76C,90C 'exploit':16B,50B,55B 'hf':108C,117C 'host':20B 'hotfix':113C 'instal':114C 'instanc':102C 'known':49B 'known-exploit':48B 'let':33B 'list':51B 'log':41B 'may':94C 'orion':2A,4A,15A,23B,26B,61C,104C 'packag':17B 'platform':105C 'probabl':56B 'rate':54B 'remot':35B,73C,84C 'result':95C 'run':37B 'self':19B 'self-host':18B 'solarwind':1A,3A,22B,25B,60C,101C,103C 'solarwinds':14A 'solarwinds-orion':21B 'version':106C 'vulner':7A,64C,80C 'window':24B 'without':40B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2020-12-29T22:15:12+00:00","kev":{"dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2020-10148","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-10148","severity":null,"published_at":"2021-11-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:53+00:00","fetched_at":"2026-10-25T10:39:08+00:00","note":null},{"source":"epss","external_id":"CVE-2020-10148","url":"https://api.first.org/data/v1/epss?cve=CVE-2020-10148","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:43+00:00","fetched_at":"2026-10-23T19:13:43+00:00","note":null},{"source":"nvd","external_id":"CVE-2020-10148","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10148","severity":null,"published_at":"2020-12-29T22:15:12+00:00","modified_at":"2026-06-17T02:47:26+00:00","first_seen_at":"2026-10-23T21:57:34+00:00","fetched_at":"2026-10-23T21:57:34+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}