SolarWinds
Vulnerability activity for SolarWinds: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 1
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 1
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 5
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 4
- With exploit code
- 3
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 7.5HighJun 5, 2026SolarWinds Serv-U Denial of serviceCVE-2026-28318SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication.Added to KEV Jun 5, 2026Exploited44% likely
- 9.8CriticalMar 9, 2026SolarWinds Web Help Desk DeserializationCVE-2025-26399SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine.Added to KEV Mar 9, 2026Exploited90% likelyExploit codeNucleiDetection
- 8.1HighFeb 12, 2026SolarWinds Web Help DeskCVE-2025-40536SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauthenticated attacker to gain access to certain restricted functionality.Added to KEV Feb 12, 2026Exploited74% likelyExploit codeMetasploit · NucleiDetection
- 9.8CriticalFeb 3, 2026SolarWinds Web Help Desk DeserializationCVE-2025-40551SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.Added to KEV Feb 3, 2026Exploited84% likelyExploit codeMetasploit · NucleiDetection
- 9.1CriticalAug 21, 2024SolarWinds Web Help Desk Auth bypass / access controlCVE-2024-28987SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data.Added to KEV Oct 15, 2024 · 54 days after publicationExploited93% likelyExploit codeMetasploit · NucleiDetection
- 9.8CriticalAug 13, 2024SolarWinds Web Help Desk DeserializationCVE-2024-28986SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution.Added to KEV Aug 15, 2024 · 1 day after publicationExploited85% likelyExploit codeNucleiDetection
- 8.6HighJun 6, 2024SolarWinds Serv-U Path traversal / file handlingCVE-2024-28995SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine.Added to KEV Jul 17, 2024 · 41 days after publicationExploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 4.3MediumJan 7, 2022SolarWinds Serv-UCVE-2021-35247SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability that allows attackers to build and send queries without sanitization.Added to KEV Jan 21, 2022 · 13 days after publicationExploited3.5% likely
- 7.8HighJun 17, 2016SolarWinds Virtualization Manager Privilege escalationCVE-2016-3643SolarWinds Virtualization Manager allows for privilege escalation through leveraging a misconfiguration of sudo.Added to KEV Nov 3, 2021 · 1,964 days after publicationExploited3.7% likelyExploit codeExploit-DB
- 9.0CriticalJul 14, 2021SolarWinds Serv-U Memory corruptionCVE-2021-35211SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution.Added to KEV Nov 3, 2021 · 111 days after publicationExploited91% likelyExploit codeNucleiDetection
- 9.8CriticalDec 29, 2020SolarWinds Orion Auth bypass / access controlCVE-2020-10148SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands.Added to KEV Nov 3, 2021 · 308 days after publicationExploited92% likelyExploit codeNucleiDetection
Recent
- 8.8HighOct 20, 2026SolarWinds Observability Self-Hosted Auth bypass / access controlCVE-2026-28328SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions.
- 7.5HighJun 5, 2026SolarWinds Serv-U Denial of serviceCVE-2026-28318SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication.Exploited44% likely
- 9.8CriticalMar 9, 2026SolarWinds Web Help Desk DeserializationCVE-2025-26399SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine.Exploited90% likelyExploit codeNucleiDetection
- 8.1HighFeb 12, 2026SolarWinds Web Help DeskCVE-2025-40536SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauthenticated attacker to gain access to certain restricted functionality.Exploited74% likelyExploit codeMetasploit · NucleiDetection
- 9.8CriticalFeb 3, 2026SolarWinds Web Help Desk DeserializationCVE-2025-40551SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.Exploited84% likelyExploit codeMetasploit · NucleiDetection
- 9.1CriticalAug 21, 2024SolarWinds Web Help Desk Auth bypass / access controlCVE-2024-28987SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data.Exploited93% likelyExploit codeMetasploit · NucleiDetection
- 9.8CriticalAug 13, 2024SolarWinds Web Help Desk DeserializationCVE-2024-28986SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution.Exploited85% likelyExploit codeNucleiDetection
- 8.6HighJun 6, 2024SolarWinds Serv-U Path traversal / file handlingCVE-2024-28995SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine.Exploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 4.3MediumJan 7, 2022SolarWinds Serv-UCVE-2021-35247SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability that allows attackers to build and send queries without sanitization.Exploited3.5% likely
- 9.8CriticalDec 29, 2020SolarWinds Orion Auth bypass / access controlCVE-2020-10148SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands.Exploited92% likelyExploit codeNucleiDetection
- 9.0CriticalJul 14, 2021SolarWinds Serv-U Memory corruptionCVE-2021-35211SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution.Exploited91% likelyExploit codeNucleiDetection
- 7.8HighJun 17, 2016SolarWinds Virtualization Manager Privilege escalationCVE-2016-3643SolarWinds Virtualization Manager allows for privilege escalation through leveraging a misconfiguration of sudo.Exploited3.7% likelyExploit codeExploit-DB
Top products
- Web Help Desk3 CVEs in the last year, 2 critical, 3 exploited
- SolarWinds Observability Self-Hosted1 CVE in the last year
- Serv-U1 CVE in the last year, 1 exploited
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- CCCS (Canada) · Oct 21, 2026SolarWinds security advisory (AV26-1068)CVE-2026-28328
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.