Live › vulnerability › CVE-2026-28335
SolarWinds Dameware, a remote-support tool for administering Windows machines, has a buffer overflow that can lead to remote code execution. An attacker who already holds valid credentials can run code on the affected host.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 17:21 UTC. All times on this page are UTC.
Any Windows system running SolarWinds Dameware (Remote Support / Mini Remote Control) version 2026.3 or earlier is affected. An attacker needs valid credentials, then can send input that overflows a buffer and may run code remotely (CVSS 8.4, network, high complexity). Teams that do not use Dameware can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Dameware | vendor | <= 2026.3 | 2026.3.1 |
Upgrade SolarWinds Dameware to 2026.3.1
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required.
This page as .md · .json · in your agent: get_signal("CVE-2026-28335")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.