CVE-2026-28327: SolarWinds Dameware DLL Hijacking Vulnerability

Published Nov 3, 2026

Updated

SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires access to the local machine and admin privileges.

Event History

Nov 3, 2026

CVE Published

via MITRE·04:21 PM

Data Sourced

via MITRE·04:21 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Exposure is limited to systems where SolarWinds Dameware is being installed. Exploitation requires access to the local machine and administrative privileges.

Can this be exploited remotely or against an unattended system?

The provided information describes a local DLL hijacking issue only. It requires local machine access, administrator privileges, and user interaction during installation.

When does the vulnerable behavior occur?

The DLL hijack occurs during Dameware installations only. The provided information does not indicate that normal operation after installation is affected.

CVE-2026-28327: SolarWinds Dameware DLL Hijacking Vulnerability

Event History

Frequently Asked Questions

Who is exposed to this issue?

Can this be exploited remotely or against an unattended system?

When does the vulnerable behavior occur?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

Can this be exploited remotely or against an unattended system?

When does the vulnerable behavior occur?