CVE-2026-283369.9Critical
SolarWinds Dameware Command Injection Vulnerability
SolarWinds · Dameware
Not in CISA KEVVendor fix available
No EPSS score yet. The score appears once FIRST publishes it.
9.9CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 4 Nov.
- SolarWinds patches critical command injection flaw in DamewareSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.