Multiple vulnerabilities discovered in SolarWinds Dameware

brown wooden door in dark room — Roman Denisenko / Unsplash

Multiple vulnerabilities have been revealed in SolarWinds' remote operation product, SolarWinds Dameware. A serious vulnerability that could compromise the host being remotely controlled has also been identified, and the company has released a fix.

The company published a security advisory on November 3, 2026, disclosing the command injection vulnerability, CVE-2026-28336. Although authentication is required for exploitation, there is a risk of the host being compromised.

The company has assigned a base score of 9.9 on the Common Vulnerability Scoring System, CVSSv3, categorizing the severity as Critical.

In addition to CVE-2026-28336, vulnerabilities such as CVE-2026-28335, which poses a threat of remote code execution via a buffer overflow requiring authentication, and CVE-2026-28327, which involves DLL hijacking during installation, have also been identified.

The company has released SolarWinds Dameware version 2026.3.1, which addresses these vulnerabilities.

This update also resolves vulnerabilities related to third-party components, including CVE-2026-111497, a buffer overflow vulnerability in the Brotli decoder, and CVE-2026-40021, which risks the loss of log records due to improper character handling in Apache log4net.