CVE-2026-28336: Command Injection in SolarWinds Dameware

CVE-2026-28336 identifies a command injection vulnerability in SolarWinds Dameware, a widely deployed remote support and access software used across enterprises. The flaw allows an authenticated attacker to execute arbitrary commands on remotely controlled hosts, fully compromising the system. Although authentication is required, this does not eliminate the risk, as remote access credentials can be compromised or leveraged by malicious insiders.

The vulnerability scores 9.9 on the CVSS scale (critical), the highest severity level. It was published on 2026-11-03 on the National Vulnerability Database (NVD). At publication time, no official patch from SolarWinds is available. Social media signals show initial spread (2 posts in the last 24 hours) but there is no evidence of public exploits on GitHub repositories, suggesting the vulnerability is not yet widely exploited in active attacks.

For defenders and system administrators: immediately verify if Dameware is in use in your organization and on which hosts. Restrict access to the software to authorized users only and carefully monitor access logs for suspicious activity. Contact SolarWinds for patch release information and, in the meantime, evaluate temporary isolation of critical instances or network segmentation. Verify that access credentials have not been compromised by examining authentication logs.