Critical severity9.9NVD Advisory· Published Nov 3, 2026· Updated Nov 3, 2026

CVE-2026-28336

Description

SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.

Affected products

SolarWinds/Damewarellm-fuzzy

Patches

Vulnerability mechanics

References

documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htmnvd
www.solarwinds.com/trust-center/security-advisories/CVE-2026-28336nvd

News mentions

No linked articles in our index yet.

cvss	0.643
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000