CVE-2026-28335: SolarWinds Dameware Buffer Overflow Vulnerability

Published Nov 3, 2026

Updated

SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required.

Event History

Nov 3, 2026

CVE Published

via MITRE·04:23 PM

Data Sourced

via MITRE·04:23 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Authentication is required, and the vulnerability has a low-privileges requirement. An unauthenticated remote attacker is not described as able to exploit it.

Can exploitation be performed remotely without user interaction?

Yes. The vector is network-based and user interaction is not required, although exploitation has high attack complexity.

What is the potential impact if exploitation succeeds?

Successful exploitation can result in remote code execution. The reported impact includes high confidentiality and integrity impact, low availability impact, and a scope change.

CVE-2026-28335: SolarWinds Dameware Buffer Overflow Vulnerability

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Can exploitation be performed remotely without user interaction?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Can exploitation be performed remotely without user interaction?

What is the potential impact if exploitation succeeds?