solarwinds security advisories
43 threat alerts tracking vulnerabilities and security advisories that affect solarwinds products.
Vulnios monitors solarwinds CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent solarwinds security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2024-23472 — solarwinds — access_rights_manager
SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM.
criticalCVE-2024-23472Critical Vulnerability: CVE-2024-23467 — solarwinds — access_rights_manager
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform remote code executi
criticalCVE-2024-23467Critical Vulnerability: CVE-2024-23471 — solarwinds — access_rights_manager
The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service r
criticalCVE-2024-23471Critical Vulnerability: CVE-2024-23466 — solarwinds — access_rights_manager
SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actio
criticalCVE-2024-23466Critical Vulnerability: CVE-2024-28074 — solarwinds — access_rights_manager
It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were implemented the researcher was able to bypass these and use a d
criticalCVE-2024-28074Critical Vulnerability: CVE-2024-23469 — solarwinds — access_rights_manager
SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privi
criticalCVE-2024-23469Critical Vulnerability: CVE-2025-40549 — solarwinds — serv-u
A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to execute code on a directory. This issue require
criticalCVE-2025-40549Critical Vulnerability: CVE-2025-40547 — solarwinds — serv-u
A logic error vulnerability exists in Serv-U which when abused could give a malicious actor with access to admin privileges the ability to execute code. This issue requires administrative privileges
criticalCVE-2025-40547Critical Vulnerability: CVE-2025-26399 — solarwinds — web_help_desk
SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution vulnerability that, if exploited, would allow an attacker to run commands on
criticalCVE-2025-26399Critical Vulnerability: CVE-2025-40548 — solarwinds — serv-u
A missing validation process exists in Serv U when abused, could give a malicious actor with access to admin privileges the ability to execute code. This issue requires administrative privileges to
criticalCVE-2025-40548Critical Vulnerability: CVE-2026-28323 — solarwinds — web_help_desk
SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.
criticalCVE-2026-28323Critical Vulnerability: CVE-2026-28314 — solarwinds — serv-u
SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. User authentication is required. The impact is lower in Windows deployments.
criticalCVE-2026-28314Critical Vulnerability: CVE-2026-28317 — solarwinds — serv-u
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires domain administrator access. The impact is lower in
criticalCVE-2026-28317Critical Vulnerability: CVE-2026-28321 — solarwinds — serv-u
SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute code as root. A domain
criticalCVE-2026-28321Critical Vulnerability: CVE-2026-28313 — solarwinds — serv-u
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover. The impact is lower in Windows deployme
criticalCVE-2026-28313Critical Vulnerability: CVE-2026-28312 — solarwinds — serv-u
SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code execution as root. The impact is lower in Windows depl
criticalCVE-2026-28312Critical Vulnerability: CVE-2026-28316 — solarwinds — serv-u
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation to a system administrator with the ability to execute commands as the ro
criticalCVE-2026-28316Critical Vulnerability: CVE-2026-28309 — solarwinds — serv-u
SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows deployments.
criticalCVE-2026-28309Critical Vulnerability: CVE-2026-28310 — solarwinds — serv-u
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a system administrator. The impact is lower in Windows d
criticalCVE-2026-28310Critical Vulnerability: CVE-2026-28308 — solarwinds — serv-u
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. The impact is lower in Window
criticalCVE-2026-28308Critical Vulnerability: CVE-2026-28305 — solarwinds — serv-u
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution as root. A domain account with admin privileges and read and write acce
criticalCVE-2026-28305Critical Vulnerability: CVE-2026-28306 — solarwinds — serv-u
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is lower in Windows deploymen
criticalCVE-2026-28306Critical Vulnerability: CVE-2026-28302 — solarwinds — serv-u
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execution as root. This issue requires group administrat
criticalCVE-2026-28302Critical Vulnerability: CVE-2026-28307 — solarwinds — serv-u
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments.
criticalCVE-2026-28307Critical Vulnerability: CVE-2026-28304 — solarwinds — serv-u
SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root. The impact is lower in Windows deployments.
criticalCVE-2026-28304Critical Vulnerability: CVE-2021-31217 — solarwinds — dameware_mini_remote_control
In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM.
criticalCVE-2021-31217Critical Vulnerability: CVE-2021-31474 — solarwinds — network_performance_monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor 2020.2.1. Authentication is not required to exploit this vulner
criticalCVE-2021-31474Critical Vulnerability: CVE-2021-27258 — solarwinds — orion_platform
This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion Platform 2020.2. Authentication is not required to exploit this vulnerability. T
criticalCVE-2021-27258Critical Vulnerability: CVE-2021-25274 — solarwinds — orion_platform
The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message Queue) and doesn't set permissions on its private queues. As a result, remote unauthenticated clients ca
criticalCVE-2021-25274Critical Vulnerability: CVE-2020-35481 — solarwinds — serv-u
SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection.
criticalCVE-2020-35481Critical Vulnerability: CVE-2020-13169 — solarwinds — orion_platform
Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may lead to the Information Disclosure and Escalation o
criticalCVE-2020-13169Critical Vulnerability: CVE-2020-15542 — solarwinds — serv-u_ftp_server
SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.
criticalCVE-2020-15542Critical Vulnerability: CVE-2020-15541 — solarwinds — serv-u_ftp_server
SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.
criticalCVE-2020-15541Critical Vulnerability: CVE-2020-15543 — solarwinds — serv-u_ftp_server
SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.
criticalCVE-2020-15543Critical Vulnerability: CVE-2019-3980 — solarwinds — dameware_mini_remote_control
The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host. An unauthenticated,
criticalCVE-2019-3980Critical Vulnerability: CVE-2019-9546 — solarwinds — orion_platform
SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service.
criticalCVE-2019-9546Critical Vulnerability: CVE-2019-8917 — solarwinds — orion_network_performance_monitor
SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unaut
criticalCVE-2019-8917Critical Vulnerability: CVE-2018-16792 — solarwinds — sftp\/scp_server
SolarWinds SFTP/SCP server through 2018-09-10 is vulnerable to XXE via a world readable and writable configuration file that allows an attacker to exfiltrate data.
criticalCVE-2018-16792Critical Vulnerability: CVE-2018-16791 — solarwinds — sftp\/scp_server
In SolarWinds SFTP/SCP Server through 2018-09-10, the configuration file is world readable and writable, and stores user passwords in an insecure manner, allowing an attacker to determine passwords fo
criticalCVE-2018-16791Critical Vulnerability: CVE-2017-7722 — solarwinds — log_\&_event_manager
In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" (the default username and password). By exploitin
criticalCVE-2017-7722Critical Vulnerability: CVE-2016-3642 — solarwinds — virtualization_manager
The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collect
criticalCVE-2016-3642Critical Vulnerability: CVE-2016-4350 — solarwinds — storage_resource_monitor
Multiple SQL injection vulnerabilities in the Web Services web server in SolarWinds Storage Resource Monitor (SRM) Profiler (formerly Storage Manager (STM)) before 6.2.3 allow remote attackers to exec
criticalCVE-2016-4350Critical Vulnerability: CVE-2012-2576 — solarwinds — backup_profiler, storage_manager
SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote att
criticalCVE-2012-2576
Track solarwinds exposure across your environment
Vulnios automatically cross-references your asset inventory against new solarwinds CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan