{"meta":{"title":"KEV entries: SolarWinds","description":"All KEV entries for vendor SolarWinds.","source":"CISA Known Exploited Vulnerabilities catalog (https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json)","catalogVersion":"2026.09.23","catalogDateReleased":"2026-09-23T12:51:35.821Z","referenceDate":"2026-09-23","publisher":"Telemetry","license":"https://creativecommons.org/licenses/by/4.0/","documentation":"https://glide-telemetry.pages.dev/api/","records":11,"vendor":"SolarWinds","entries":11,"shareOfCatalogPercent":0.6,"ransomwareKnown":2,"firstDateAdded":"2021-11-03","latestDateAdded":"2026-06-05","rank":27},"data":[{"cveID":"CVE-2026-28318","vendorProject":"SolarWinds","product":"Serv-U","vulnerabilityName":"SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability","dateAdded":"2026-06-05","dueDate":"2026-06-19","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-400"],"shortDescription":"SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28318 ; https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm#link7 ; https://nvd.nist.gov/vuln/detail/CVE-2026-28318","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2026-28318"},{"cveID":"CVE-2025-26399","vendorProject":"SolarWinds","product":"Web Help Desk","vulnerabilityName":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-03-09","dueDate":"2026-03-12","knownRansomwareCampaignUse":"Known","cwes":["CWE-502"],"shortDescription":"SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.solarwinds.com/trust-center/security-advisories/cve-2025-26399 ; https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-8-7-hotfix-1_release_notes.htm ; https://nvd.nist.gov/vuln/detail/CVE-2025-26399","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2025-26399"},{"cveID":"CVE-2025-40536","vendorProject":"SolarWinds","product":"Web Help Desk","vulnerabilityName":"SolarWinds Web Help Desk Security Control Bypass Vulnerability","dateAdded":"2026-02-12","dueDate":"2026-02-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-693"],"shortDescription":"SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauthenticated attacker to gain access to certain restricted functionality.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm ; https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40536 ; https://nvd.nist.gov/vuln/detail/CVE-2025-40536","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2025-40536"},{"cveID":"CVE-2025-40551","vendorProject":"SolarWinds","product":"Web Help Desk","vulnerabilityName":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-02-03","dueDate":"2026-02-06","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-502"],"shortDescription":"SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.solarwinds.com/trust-center/security-advisories/cve-2025-40551 ; https://nvd.nist.gov/vuln/detail/CVE-2025-40551","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2025-40551"},{"cveID":"CVE-2024-28987","vendorProject":"SolarWinds","product":"Web Help Desk","vulnerabilityName":"SolarWinds Web Help Desk Hardcoded Credential Vulnerability","dateAdded":"2024-10-15","dueDate":"2024-11-05","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-798"],"shortDescription":"SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987 ; https://nvd.nist.gov/vuln/detail/CVE-2024-28987","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2024-28987"},{"cveID":"CVE-2024-28986","vendorProject":"SolarWinds","product":"Web Help Desk","vulnerabilityName":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-08-15","dueDate":"2024-09-05","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-502"],"shortDescription":"SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28986; https://nvd.nist.gov/vuln/detail/CVE-2024-28986","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2024-28986"},{"cveID":"CVE-2024-28995","vendorProject":"SolarWinds","product":"Serv-U","vulnerabilityName":"SolarWinds Serv-U Path Traversal Vulnerability ","dateAdded":"2024-07-17","dueDate":"2024-08-07","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-22"],"shortDescription":"SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28995; https://nvd.nist.gov/vuln/detail/CVE-2024-28995","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2024-28995"},{"cveID":"CVE-2021-35247","vendorProject":"SolarWinds","product":"Serv-U","vulnerabilityName":"SolarWinds Serv-U Improper Input Validation Vulnerability","dateAdded":"2022-01-21","dueDate":"2022-02-04","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability that allows attackers to build and send queries without sanitization.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-35247","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2021-35247"},{"cveID":"CVE-2021-35211","vendorProject":"SolarWinds","product":"Serv-U","vulnerabilityName":"SolarWinds Serv-U Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomwareCampaignUse":"Known","cwes":["CWE-787"],"shortDescription":"SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-35211","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2021-35211"},{"cveID":"CVE-2020-10148","vendorProject":"SolarWinds","product":"Orion","vulnerabilityName":"SolarWinds Orion Authentication Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-288"],"shortDescription":"SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-10148","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2020-10148"},{"cveID":"CVE-2016-3643","vendorProject":"SolarWinds","product":"Virtualization Manager","vulnerabilityName":"SolarWinds Virtualization Manager Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-264"],"shortDescription":"SolarWinds Virtualization Manager allows for privilege escalation through leveraging a misconfiguration of sudo.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-3643","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2016-3643"}]}