SolarWinds Dameware affected by security vulnerabilities
Dameware is affected by vulnerabilities prior to or equal to 2026.3.1.
Stories per day · 30 days
2 RSS
Relateddameware3command-injection2observability2access-control1agentic-ai1broken-authorization1cert-advisory1infosec-products1mcp1ninjaone1qualys1rce1remote-access1scytale1splunk1
12 stories, newest first · one card per story
Stories tagged #solarwinds
SolarWinds Dameware command injection flaw could allow remote system compromise
Critical CVE-2026-28336 in SolarWinds Dameware allows attackers to take over remotely controlled computers.
SolarWinds Dameware command injection lets authenticated attackers take control
SolarWinds Dameware 2026.3 command injection vulnerability allows remote compromise; fixed in 2026.3.1.
Splunk and SolarWinds patch code execution and access flaws
Fixes cover 16 product CVEs in Splunk Enterprise, 15 in SOAR, plus Observability and Patch Manager bugs.
1
SolarWinds Observability Self-Hosted before 2026.4 has broken authorization
Canada’s Cyber Centre points administrators to CVE-2026-28328 and says to apply SolarWinds updates when available.
New infosec products of the week: October 16, 2026
NinjaOne, Qualys, Scytale, and SolarWinds released agentic AI tools for IT operations, compliance, and remediation.
9
An OpenAI Agent Hacked Australia's Health Service. Their Government Found Out Months Later.
SolarWinds has patched two RCE vulnerabilities in Observability Self-Hosted, affecting all versions up to 2026.2.3.
2
SolarWinds security advisory (AV26-950)
Canadian Cyber Centre advisory warns of unauthenticated and authenticated RCE flaws in SolarWinds Observability Self-Hosted.
SolarWinds Observability Flaws Let Unauthenticated Attackers Execute Remote Code
SolarWinds patched two unauthenticated RCE flaws in Observability Self-Hosted 2026.2.3; CVE-2026-28324 scores CVSS 9.8, CVE-2026-28325 scores 8.8, no exploitation reported.
2
Critical SolarWinds Flaws Let Attackers Remotely Execute Code on Observability Servers
SolarWinds patches critical CVEs allowing unauthenticated RCE on Observability Self-Hosted servers in non-default configs.
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
SolarWinds patched CVE-2026-28326 (CVSS 8.8), a hard-coded-key flaw enabling unauthenticated remote code execution in Access Rights Manager 2026.2 and prior.
SolarWinds security advisory (AV26-941)
Canadian Cyber Centre alerts on unauthenticated RCE vulnerability CVE-2026-28326 in SolarWinds Access Rights Manager before 2026.2.