Live › vulnerability › CVE-2026-28336
SolarWinds Dameware, a remote-control tool for administrators, has a command injection flaw. An attacker with valid credentials can run commands and compromise the host being controlled remotely.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 17:21 UTC. All times on this page are UTC.
Anyone running SolarWinds Dameware 2026.3 or any earlier version is affected. The attack is reachable over the network but needs a valid low-privilege login; a successful command injection can compromise the remotely controlled host. Teams that do not use Dameware can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Dameware | vendor | <= 2026.3 | 2026.3.1 |
Check the installed Dameware version on admin consoles and on hosts running the Dameware agent. 2026.3 or earlier is affected; 2026.3.1 is fixed.
Upgrade SolarWinds Dameware to 2026.3.1 (released 2026-11-03).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.
This page as .md · .json · in your agent: get_signal("CVE-2026-28336")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.