Vendor
SolarWinds vulnerabilities under active attack
11 SolarWinds vulnerabilities have confirmed evidence of exploitation in the wild, and 1 is used in ransomware campaigns.
11
confirmed exploited
1
used in ransomware
11
past fix deadline
- CVE-2026-28318 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability SolarWinds · Serv-U
- CVE-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds · Web Help Desk
- CVE-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability SolarWinds · Web Help Desk
- CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds · Web Help Desk
- CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability SolarWinds · Web Help Desk
- CVE-2024-28986 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds · Web Help Desk
- CVE-2024-28995 SolarWinds Serv-U Path Traversal Vulnerability SolarWinds · Serv-U
- CVE-2021-35247 SolarWinds Serv-U Improper Input Validation Vulnerability SolarWinds · Serv-U
- CVE-2020-10148 SolarWinds Orion Authentication Bypass Vulnerability SolarWinds · Orion
- CVE-2021-35211 SolarWinds Serv-U Remote Code Execution Vulnerability SolarWinds · Serv-U
- CVE-2016-3643 SolarWinds Virtualization Manager Privilege Escalation Vulnerability SolarWinds · Virtualization Manager