netVigilance Vulnerability intelligence since 2004

SolarWinds

11 SolarWinds vulnerabilities with confirmed exploitation in the wild, as published by CISA; 11 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for SolarWinds
Vulnerability Status
overdue 83d2026-06-19 CVE-2026-28318 SolarWinds / Serv-U SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability 2026-06-05 7.5 past due
overdue 182d2026-03-12 CVE-2025-26399 SolarWinds / Web Help Desk SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability 2026-03-09 9.8 past dueransomware
overdue 207d2026-02-15 CVE-2025-40536 SolarWinds / Web Help Desk SolarWinds Web Help Desk Security Control Bypass Vulnerability 2026-02-12 9.8 past due
overdue 216d2026-02-06 CVE-2025-40551 SolarWinds / Web Help Desk SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability 2026-02-03 9.8 past due
overdue 674d2024-11-05 CVE-2024-28987 SolarWinds / Web Help Desk SolarWinds Web Help Desk Hardcoded Credential Vulnerability 2024-10-15 9.1 past due
overdue 735d2024-09-05 CVE-2024-28986 SolarWinds / Web Help Desk SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability 2024-08-15 9.8 past due
overdue 764d2024-08-07 CVE-2024-28995 SolarWinds / Serv-U SolarWinds Serv-U Path Traversal Vulnerability 2024-07-17 7.5 past due
overdue 1679d2022-02-04 CVE-2021-35247 SolarWinds / Serv-U SolarWinds Serv-U Improper Input Validation Vulnerability 2022-01-21 5.3 past due
overdue 1758d2021-11-17 CVE-2021-35211 SolarWinds / Serv-U SolarWinds Serv-U Remote Code Execution Vulnerability 2021-11-03 10.0 past dueransomware
overdue 1591d2022-05-03 CVE-2020-10148 SolarWinds / Orion SolarWinds Orion Authentication Bypass Vulnerability 2021-11-03 9.8 past due
overdue 1591d2022-05-03 CVE-2016-3643 SolarWinds / Virtualization Manager SolarWinds Virtualization Manager Privilege Escalation Vulnerability 2021-11-03 7.8 past due