Live › vulnerability › CVE-2026-28327
SolarWinds Dameware is affected by a DLL hijacking flaw that occurs during installation. An attacker with local access and admin privileges can place a malicious DLL that the installer loads.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 17:21 UTC. All times on this page are UTC.
Teams running SolarWinds Dameware 2026.3 or any earlier version on Windows. The DLL hijack happens only while installing, and needs local access and admin privileges, so it matters on hosts where installers are run by or near less-trusted admins. Skip it if you have no Dameware or never run its installers on shared hosts.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Dameware | vendor | <= 2026.3 | 2026.3.1 |
2026.3.1 is fixedUpgrade Dameware to 2026.3.1 (SolarWinds customer portal).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires access to the local machine and admin privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-28327")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.