CVE-2026-28327
HighCVSS 8.2Summary
SolarWinds Dameware is affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires access to the local machine and admin privileges.
Risk Assessment
An attacker with local access and admin privileges could replace a DLL during installation and execute their own code.
Recommendation
Apply the available SolarWinds Dameware updates and perform installations in a controlled environment with restricted local access.
Other vulnerabilities in SolarWinds Dameware
See all- CVE-2026-28335High
SolarWinds Dameware is affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required.
- CVE-2026-28336Critical
SolarWinds Dameware is affected by a command injection vulnerability that could lead to compromise of the remotely controlled host. Authentication is required.
Original NVD description (English source)
SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires access to the local machine and admin privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS