CVE-2026-28323SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability Exploitation status Not known exploited Fix Affected product W Web Help Desk Published 07/30/2026 Severity Critical CVE-2026-28321SolarWinds Serv-U Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 07/21/2026 Severity Critical CVE-2026-28317SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 07/21/2026 Severity Critical CVE-2026-28316SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 07/21/2026 Severity Critical CVE-2026-28315SolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 07/21/2026 Severity Medium CVE-2026-28314SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 07/21/2026 Severity Critical CVE-2026-28313SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 07/21/2026 Severity Critical CVE-2026-28312SolarWinds Serv-U Privilege Escalation Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 07/21/2026 Severity Critical CVE-2026-28310SolarWinds Serv-U Privilege Escalation Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 07/21/2026 Severity Critical CVE-2026-28309SolarWinds Serv-U Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 07/21/2026 Severity Critical CVE-2026-28308SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 07/21/2026 Severity Critical CVE-2026-28307SolarWinds Serv-U Privilege Escalation Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 07/21/2026 Severity Critical CVE-2026-28306SolarWinds Serv-U Privilege Escalation Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 07/21/2026 Severity Critical CVE-2026-28305SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 07/21/2026 Severity Critical CVE-2026-28304SolarWinds Serv-U Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 07/21/2026 Severity Critical CVE-2026-28302SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 07/21/2026 Severity Critical CVE-2026-28322SolarWinds Database Performance Analyzer Stored Cross-Site Scripting Vulnerability Exploitation status Not known exploited Fix Affected product D Database Performance Analyzer Published 06/30/2026 Severity Medium CVE-2026-28301SolarWinds Observability Self-Hosted Open Redirect Vulnerability Exploitation status Not known exploited Fix Affected product O Observability Self-Hosted Published 06/09/2026 Severity Medium CVE-2026-28318SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability Exploitation status KEV Fix Affected product S Serv-U Published 06/04/2026 Severity High CVE-2026-28299SolarWinds Web Help Desk Denial-of-Service Vulnerability Exploitation status Not known exploited Fix Affected product W Web Help Desk Published 06/02/2026 Severity High CVE-2018-25252FTP Voyager 16.2.0 Denial of Service via Malformed Site Profile Exploitation status Public exploit Fix Not confirmed Affected product F FTP Voyager Published 04/04/2026 Severity Medium CVE-2026-28298SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product S SolarWinds Observability Self-Hosted Published 03/26/2026 Severity Medium CVE-2026-28297SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product S SolarWinds Observability Self-Hosted Published 03/26/2026 Severity Medium CVE-2025-40541SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 02/24/2026 Severity Critical CVE-2025-40540SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 02/24/2026 Severity Critical CVE-2025-40539SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 02/24/2026 Severity Critical CVE-2025-40538SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 02/24/2026 Severity Critical CVE-2025-40554SolarWinds Web Help Desk Authentication Bypass Vulnerability Exploitation status Not known exploited Fix Affected product W Web Help Desk Published 01/28/2026 Severity Critical CVE-2025-40553SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability Exploitation status Public exploit Fix Affected product W Web Help Desk Published 01/28/2026 Severity Critical CVE-2025-40552SolarWinds Web Help Desk Authentication Bypass Vulnerability Exploitation status Public exploit Fix Affected product W Web Help Desk Published 01/28/2026 Severity Critical CVE-2025-40551SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability Exploitation status KEV Fix Affected product W Web Help Desk Published 01/28/2026 Severity Critical CVE-2025-40537SolarWinds Web Help Desk Hardcoded Credentials Vulnerability Exploitation status Not known exploited Fix Affected product W Web Help Desk Published 01/28/2026 Severity High CVE-2025-40536SolarWinds Web Help Desk Security Control Bypass Vulnerability Exploitation status KEV Fix Affected product W Web Help Desk Published 01/28/2026 Severity High CVE-2025-40545SolarWinds Observability Self-Hosted Open Redirection Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Observability Self-Hosted Published 11/18/2025 Severity Medium CVE-2025-26391SolarWinds Observability Self-Hosted XSS Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Observability Self-Hosted Published 11/18/2025 Severity Medium CVE-2025-40549SolarWinds Serv-U Path Restriction Bypass Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 11/18/2025 Severity Critical CVE-2025-40548SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 11/18/2025 Severity Critical CVE-2025-40547SolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 11/18/2025 Severity Critical CVE-2025-26392SolarWinds Observability Self-Hosted SQL Injection Vulnerability Exploitation status Not known exploited Fix Affected product O Observability Self-Hosted Published 10/21/2025 Severity Medium CVE-2025-26399SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability Exploitation status KEV Fix Affected product W Web Help Desk Published 09/23/2025 Severity Critical CVE-2024-28988SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product W Web Help Desk Published 09/01/2025 Severity Critical CVE-2025-26398SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability Exploitation status Not known exploited Fix Affected product D Database Performance Analyzer Published 08/12/2025 Severity Medium CVE-2025-26400SolarWinds Web Help Desk XML External Entity Injection (XXE) Vulnerability Exploitation status Not known exploited Fix Affected product W Web Help Desk Published 07/29/2025 Severity Medium CVE-2025-26397SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Observability Self-Hosted Published 07/24/2025 Severity High CVE-2025-26395SolarWinds SWOSH DOM-based reflective XSS Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Observability Self-Hosted Published 06/10/2025 Severity High CVE-2025-26394SolarWinds SWOSH Open Redirection Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Observability Self-Hosted Published 06/10/2025 Severity Medium CVE-2025-26396SolarWinds Dameware Mini Remote Control Service Incorrect Permissions Local Privilege Escalation Vulnerability Exploitation status Not known exploited Fix Affected product D Dameware Mini Remote Control Service Published 06/02/2025 Severity High CVE-2024-45712SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 04/15/2025 Severity Low CVE-2025-26393SolarWinds Service Desk Broken Access Control Vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product S Service Desk Published 03/17/2025 Severity Medium CVE-2024-52611SolarWinds Platform Information Disclosure Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Platform Published 02/11/2025 Severity Low CVE-2024-52612SolarWinds Platform Reflected Cross-Site Scripting Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Platform Published 02/11/2025 Severity Medium CVE-2024-45718Sensitive data disclosure vulnerability Exploitation status Not known exploited Fix Affected product K Kiwi Syslog NG Published 02/11/2025 Severity Medium CVE-2024-52606SolarWinds Platform Server-Side Request Forgery Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Published 02/11/2025 Severity Low CVE-2024-28989SolarWinds Web Help Desk Cryptographic Key Management Vulnerability Exploitation status Not known exploited Fix Affected product W Web Help Desk Published 02/11/2025 Severity Medium CVE-2024-45709SolarWinds Web Help Desk Local File Read Vulnerability Exploitation status Not known exploited Fix Affected product W Web Help Desk Published 12/10/2024 Severity Medium CVE-2024-45717SolarWinds Platform Cross- Site Scripting Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Platform Published 12/04/2024 Severity High CVE-2024-45713SolarWinds Kiwi CatTools Sensitive Information Disclosure Vulnerability Exploitation status Not known exploited Fix Affected product K Kiwi CatTools Published 10/17/2024 Severity Medium CVE-2024-45711SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 10/16/2024 Severity High CVE-2024-45714SolarWinds Serv-U Stored XSS Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 10/16/2024 Severity Medium CVE-2024-45715SolarWinds Platform Edit Function Cross-Site Scripting Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Platform Published 10/16/2024 Severity High CVE-2024-45710SolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Platform Published 10/16/2024 Severity High CVE-2024-28991SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 09/12/2024 Severity Critical CVE-2024-28990SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 09/12/2024 Severity Medium CVE-2024-28987SolarWinds Web Help Desk Hardcoded Credential Vulnerability Exploitation status KEV Fix Affected product W Web Help Desk Published 08/21/2024 Severity Critical CVE-2024-28986SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability Exploitation status KEV Fix Affected product W Web Help Desk Published 08/13/2024 Severity Critical CVE-2024-23471SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 07/17/2024 Severity Critical CVE-2024-23470SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 07/17/2024 Severity Critical CVE-2024-28074SolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 07/17/2024 Severity Critical CVE-2024-23467SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 07/17/2024 Severity Critical CVE-2024-23466SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 07/17/2024 Severity Critical CVE-2024-23465SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 07/17/2024 Severity High CVE-2024-23469SolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 07/17/2024 Severity Critical CVE-2024-23475SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 07/17/2024 Severity Critical CVE-2024-23472SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 07/17/2024 Severity Critical CVE-2024-28993SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 07/17/2024 Severity High CVE-2024-28992SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 07/17/2024 Severity High CVE-2024-23468SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 07/17/2024 Severity High CVE-2024-23474SolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 07/17/2024 Severity High CVE-2024-28995SolarWinds Serv-U L Directory Transversal Vulnerability Exploitation status KEV Fix Affected product S SolarWinds Serv-U Published 06/06/2024 Severity High CVE-2024-29004SolarWinds Platform Stored XSS Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Platform Published 06/04/2024 Severity High CVE-2024-28999SolarWinds Platform Race Condition Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Platform Published 06/04/2024 Severity Medium CVE-2024-28996SolarWinds Platform SWQL Injection Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Platform Published 06/04/2024 Severity High CVE-2024-29000SolarWinds Platform Reflected XSS Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Platform Published 05/20/2024 Severity High CVE-2024-23473SolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 05/09/2024 Severity High CVE-2024-28075SolarWinds ARM Deserialization of Untrusted Data Remote Code Execution Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 05/09/2024 Severity Critical CVE-2024-28072Arbitrary File Overwrite Vulnerability Exploitation status Not known exploited Fix Affected product S Serv-U Published 05/03/2024 Severity Medium CVE-2024-29003SolarWinds Platform Cross Site Scripting Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Platform Published 04/18/2024 Severity High CVE-2024-29001SolarWinds Platform SWQL Injection Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Platform Published 04/18/2024 Severity High CVE-2024-28076SolarWinds Platform Arbitrary Open Redirection Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Platform Published 04/18/2024 Severity High CVE-2024-28073SolarWinds Serv-U Directory Traversal Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product S ServU Published 04/17/2024 Severity High CVE-2024-0692SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product S Security Event Manager Published 03/01/2024 Severity High CVE-2023-40057SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 02/15/2024 Severity Critical CVE-2024-23477SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 02/15/2024 Severity High CVE-2024-23476SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 02/15/2024 Severity Critical CVE-2024-23478SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 02/15/2024 Severity High CVE-2024-23479SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 02/15/2024 Severity Critical CVE-2023-35188SQL Injection Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Platform Published 02/06/2024 Severity High CVE-2023-50395SQL Injection Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product S SolarWinds Platform Published 02/06/2024 Severity High CVE-2023-40058Sensitive Information Disclosure Vulnerability Exploitation status Not known exploited Fix Affected product A Access Rights Manager Published 12/21/2023 Severity Medium CVE-2023-40053HTML injection Vulnerability in Serv-U 15.4 Exploitation status Not confirmed Fix Affected product S Serv-U Published 12/06/2023 Severity Medium 
