SolarWinds Dameware command injection lets authenticated attackers take control
Original title: Critical SolarWinds Dameware Vulnerability Enables Attackers to Take Control of Remote Systems
SolarWinds Dameware 2026.3 command injection vulnerability allows remote compromise; fixed in 2026.3.1.
SolarWinds announced a critical command injection vulnerability in Dameware that enables authenticated attackers to remotely compromise systems. The flaw affects versions 2026.3 and earlier with CVSS 9.9. A patched 2026.3.1 release addresses it. Exploitation can affect broader resources but requires authentication and no user interaction.
Unconfirmed: No confirmed in-the-wild exploitation or precise attack vector disclosed.
- CVSS score 9.9
- Discovered by Greg Bernatowicz
- No known exploitation in the wild
- Previous similar local issue fixed separately
Impact: remote command execution as the host user
- 1.Update to Dameware 2026.3.1
- 2.restrict remote administration access
- 3.review account privileges
- CVEs
- CVE-2026-28336
- Vendors
- SolarWinds
- Products
- Dameware
- Organizations
- Boeing Enterprise Security Red Team
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-28336 | Command injection in SolarWinds Dameware (requires authentication) | 9.9 | — |
From the original article
2 min read at gbhackers.com
SolarWinds has announced a critical command injection vulnerability in its Dameware software that could let authenticated attackers remotely compromise controlled hosts. This vulnerability, identified as CVE-2026-28336, has a CVSS score of 9. 9 and affects Dameware version 2026.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.