CVE-2026-28335 PUBLISHED

SolarWinds Dameware Buffer Overflow Vulnerability

Assigner: SolarWinds
Reserved: 26.02.2026 Published: 03.11.2026 Updated: 04.11.2026

SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
CVSS Score: 8.4

Product Status

Vendor SolarWinds
Product Dameware
Versions Default: affected
  • affected from 0 to 2026.3 (incl.)

Solutions

SolarWinds recommends customers to upgrade to Dameware 2026.3.1 as soon as is practical.

Credits

  • Greg Bernatowicz on the Boeing Enterprise Security Red Team reporter

References

Problem Types

  • CWE-20 Improper Input Validation CWE

Impacts

  • CAPEC-253 Remote Code Inclusion