SolarWinds vulnerabilities
218 CVEs and advisories name SolarWinds as an affected vendor, 10 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-28318SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability
- CVE-2025-40551SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2025-40536SolarWinds Web Help Desk Security Control Bypass Vulnerability
- CVE-2025-26399SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
- CVE-2024-28987SolarWinds Web Help Desk Hardcoded Credential Vulnerability
- CVE-2024-28986SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
- CVE-2024-28995SolarWinds Serv-U L Directory Transversal Vulnerability
- CVE-2021-35247Improper Input Validation Vulnerability in Serv-U
- CVE-2021-35211Serv-U Remote Memory Escape Vulnerability
- CVE-2020-10148SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands