DLL Hijacking Vulnerability in SolarWinds Dameware
CVE-2026-28327

8.2HIGH

Key Information:

Vendor

Solarwinds
Status
Dameware
Vendor
CVE Published:
3 November 2026

What is CVE-2026-28327?

The vulnerability in SolarWinds Dameware presents a risk due to DLL hijacking that occurs during the installation process. This exploitation requires administrative access and local machine permissions, leading to potential unauthorized code execution. Users are advised to implement security measures to mitigate these risks and ensure that installations are carried out securely. For detailed information, refer to the official vendor advisory.

Affected Version(s)

Dameware 0 <= 2026.3

References

https://documentation.solarwinds.com/en/success_center/da...
release-notes
https://www.solarwinds.com/trust-center/security-advisori...
vendor-advisory

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Luiz Felipe Mol (Confu53)
.