---
title: Multiple vulnerabilities discovered in SolarWinds Dameware
url: https://www.dataloco.com/en/multiple-vulnerabilities-discovered-in-solarwinds-dameware
published: 2026-11-07T19:20:32+00:00
language: en
section: Security
source: https://www.security-next.com/192398
organizations: solarwinds, dameware
publisher: Dataloco
---

# Multiple vulnerabilities discovered in SolarWinds Dameware

Multiple vulnerabilities have been revealed in SolarWinds' remote operation product, SolarWinds Dameware. A serious vulnerability that could compromise the host being remotely controlled has also been identified, and the company has released a fix.

The company published a security advisory on November 3, 2026, disclosing the command injection vulnerability, CVE-2026-28336. Although authentication is required for exploitation, there is a risk of the host being compromised.

The company has assigned a base score of 9.9 on the Common Vulnerability Scoring System, CVSSv3, categorizing the severity as Critical.

In addition to CVE-2026-28336, vulnerabilities such as CVE-2026-28335, which poses a threat of remote code execution via a buffer overflow requiring authentication, and CVE-2026-28327, which involves DLL hijacking during installation, have also been identified.

The company has released SolarWinds Dameware version 2026.3.1, which addresses these vulnerabilities.

This update also resolves vulnerabilities related to third-party components, including CVE-2026-111497, a buffer overflow vulnerability in the Brotli decoder, and CVE-2026-40021, which risks the loss of log records due to improper character handling in Apache log4net.

## This story in other languages

- [Türkçe](https://www.dataloco.com/tr/solarwinds-dameware-urununde-birden-fazla-guvenlik-acigi-tespit-edildi)
- [Français](https://www.dataloco.com/fr/des-vulnerabilites-multiples-decouvertes-dans-solarwinds-dameware)
- [Norsk](https://www.dataloco.com/no/flere-sarbarheter-oppdaget-i-solarwinds-dameware)
- [Português (Brasil)](https://www.dataloco.com/pt-br/dameware-da-solarwinds-apresenta-multiplas-vulnerabilidades)