Log in Start free

SolarWinds

Products

ProductCVEsExploitedLatest
Web Help Desk195Jul 30, 2026
Serv-U342Jul 21, 2026
Orion Platform241Nov 29, 2022
Serv-U Managed File Transfer Server and Serv-U Secured FTP11Jul 14, 2021
SolarWinds Serv-U11Jun 6, 2024
SolarWinds Platform41–Feb 11, 2025
Access Rights Manager33–Sep 17, 2026
SolarWinds Observability Self-Hosted10–Oct 20, 2026
Network Configuration Manager7–Nov 9, 2023
Kiwi Syslog Server5–Oct 29, 2021
Patch Manager4–Oct 20, 2026
Database Performance Analyzer4–Jun 30, 2026
Observability Self-Hosted4–Sep 22, 2026
SolarWinds SEM 3–Nov 23, 2022
Dameware3–Nov 3, 2026
SolarWinds2–Feb 11, 2025
ServU2–Apr 17, 2024
Kiwi CatTools2–Oct 17, 2024
Network Performance Monitor2–May 21, 2021
Database Performance Analyzer (DPA)2–Jan 20, 2023
SQL Sentry1–Oct 19, 2022
WebHelpDesk1–Mar 25, 2022
Dameware Mini Remote Control Service1–Jun 2, 2025
Database Performance Monitor1–Apr 21, 2022
DPA1–Jul 18, 2023
Engineer's Toolset1–Nov 23, 2022
Hybrid Cloud Observability (HCO)/ SolarWinds Platform1–Dec 21, 2022
Kiwi Syslog NG1–Feb 11, 2025
NPM1–Oct 21, 2021
Orion1–Dec 20, 2021
Orion Core1–Dec 20, 2021
Orion Job Scheduler1–May 21, 2021
Orion Virtual Infrastructure Monitor1–Apr 22, 2021
Pingdom1–Oct 12, 2021
Security Event Manager 1–Mar 1, 2024
Serv-U File Server1–Dec 16, 2022
Serv-U FTP1–Dec 6, 2021
Serv-U FTP Server1–Dec 16, 2022
Serv-U Server1–Dec 6, 2021
Server & Application Monitor (SAM)1–Feb 15, 2023
Service Desk1–Mar 17, 2025

Exploited and recent CVEs

  • CVE-2026-28318 High 7.5 Exploited SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability 43.7%
  • CVE-2025-40551 Critical 9.8 Exploited SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability 84.2%
  • CVE-2025-40536 High 8.1 Exploited SolarWinds Web Help Desk Security Control Bypass Vulnerability 73.6%
  • CVE-2025-26399 Critical 9.8 Exploited SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability 90.6%
  • CVE-2024-28987 Critical 9.1 Exploited SolarWinds Web Help Desk Hardcoded Credential Vulnerability 93.3%
  • CVE-2024-28986 Critical 9.8 Exploited SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability 84.6%
  • CVE-2024-28995 High 8.6 Exploited SolarWinds Serv-U L Directory Transversal Vulnerability 99.6%
  • CVE-2021-35247 Medium 4.3 Exploited Improper Input Validation Vulnerability in Serv-U 3.6%
  • CVE-2021-35211 Critical 9.0 Exploited Serv-U Remote Memory Escape Vulnerability 91.2%
  • CVE-2020-10148 Critical 9.8 Exploited SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands 92.0%
  • CVE-2026-28336 Critical 9.9 SolarWinds Dameware Command Injection Vulnerability 1.6%
  • CVE-2026-28335 High 8.4 SolarWinds Dameware Buffer Overflow Vulnerability 1.0%
  • CVE-2026-28327 High 8.2 SolarWinds Dameware DLL Hijacking Vulnerability 0.2%
  • CVE-2026-28330 Medium 4.6 SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability 0.3%
  • CVE-2026-28329 Medium 6.4 SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF) 0.3%
  • CVE-2026-28328 High 8.8 SolarWinds Observability Self-Hosted broken authorization schema 0.5%
  • CVE-2026-28331 Medium 4.4 SolarWinds Patch Manager Sensitive Information Exposure Vulnerability 0.2%
  • CVE-2026-28325 High 8.8 SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability 1.5%
  • CVE-2026-28324 Critical 9.8 SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability 0.7%
  • CVE-2026-28326 High 8.8 SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability 0.7%
  • CVE-2026-28323 Critical 9.8 SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability 1.0%
  • CVE-2026-28321 Critical 9.1 SolarWinds Serv-U Broken Access Control Vulnerability 0.6%
  • CVE-2026-28317 Critical 9.1 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability 0.5%
  • CVE-2026-28316 Critical 9.1 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability 2.1%
  • CVE-2026-28315 Medium 6.2 SolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) Vulnerability 0.5%
  • CVE-2026-28314 Critical 9.1 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability 0.6%
  • CVE-2026-28313 Critical 9.1 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability 0.5%
  • CVE-2026-28312 Critical 9.1 SolarWinds Serv-U Privilege Escalation Vulnerability 0.6%
  • CVE-2026-28310 Critical 9.1 SolarWinds Serv-U Privilege Escalation Vulnerability 0.5%
  • CVE-2026-28309 Critical 9.1 SolarWinds Serv-U Broken Access Control Vulnerability 0.5%