SolarWinds vulnerabilities
218 CVEs and advisories name SolarWinds as an affected vendor, 10 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-28298SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability
- CVE-2026-28297SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability
- CVE-2025-40541SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability
- CVE-2025-40540SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability
- CVE-2025-40539SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability
- CVE-2025-40538SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability
- CVE-2025-40554SolarWinds Web Help Desk Authentication Bypass Vulnerability
- CVE-2025-40553SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2025-40552SolarWinds Web Help Desk Authentication Bypass Vulnerability
- CVE-2025-40551SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2025-40537SolarWinds Web Help Desk Hardcoded Credentials Vulnerability
- CVE-2025-40536SolarWinds Web Help Desk Security Control Bypass Vulnerability
- CVE-2025-40545SolarWinds Observability Self-Hosted Open Redirection Vulnerability
- CVE-2025-26391SolarWinds Observability Self-Hosted XSS Vulnerability
- CVE-2025-40549SolarWinds Serv-U Path Restriction Bypass Vulnerability
- CVE-2025-40548SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability
- CVE-2025-40547SolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability
- CVE-2025-26392SolarWinds Observability Self-Hosted SQL Injection Vulnerability
- CVE-2025-26399SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
- CVE-2024-28988SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
- CVE-2025-26398SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability
- CVE-2025-26400SolarWinds Web Help Desk XML External Entity Injection (XXE) Vulnerability
- CVE-2025-26397SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation Vulnerability
- CVE-2025-26395SolarWinds SWOSH DOM-based reflective XSS Vulnerability
- CVE-2025-26394SolarWinds SWOSH Open Redirection Vulnerability
- CVE-2025-26396SolarWinds Dameware Mini Remote Control Service Incorrect Permissions Local Privilege Escalation Vulnerability
- CVE-2024-45712SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability
- CVE-2025-26393SolarWinds Service Desk Broken Access Control Vulnerability
- CVE-2024-52611SolarWinds Platform Information Disclosure Vulnerability
- CVE-2024-52612SolarWinds Platform Reflected Cross-Site Scripting Vulnerability