Buffer Overflow Vulnerability in SolarWinds Dameware Software
CVE-2026-28335

8.4HIGH

Key Information:

Vendor

Solarwinds
Status
Dameware
Vendor
CVE Published:
3 November 2026

What is CVE-2026-28335?

SolarWinds Dameware is impacted by a buffer overflow vulnerability that may allow an attacker to execute arbitrary code remotely, given that authentication is present. This poses a significant risk to system integrity and security, necessitating prompt attention from users and administrators. Users are encouraged to review the respective security advisory for further details and recommended mitigation measures.

Affected Version(s)

Dameware 0 <= 2026.3

References

https://https://documentation.solarwinds.com/en/success_c...
release-notes
https://www.solarwinds.com/trust-center/security-advisori...
vendor-advisory

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Greg Bernatowicz on the Boeing Enterprise Security Red Team
.