SolarWinds Dameware Command Injection Vulnerability

Summary

SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.

Remediation

1. Inventory every SolarWinds Dameware deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Advisoryhttps://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28336
• Referencehttps://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htm