poslední zpráva · zachyceno
SPOJENO AI EPSS 0.02 (nejvyšší)
Critical vulnerability in SolarWinds Dameware
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9, CVEs: CVE-2026-28336, Summary: SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.
SolarWinds FI CA IT FR
CVE v události 3
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-28327 | 8.2 3.1 · SolarWinds | – | < 0.01 |
| CVE-2026-28335 | 8.4 3.1 · SolarWinds | – | 0.01 |
| CVE-2026-28336 | 9.9 3.1 · SolarWinds | – | 0.02 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.9.
Jak se o tom psalo 4
-
· zachyceno · NCSC-FI FI nadpis události
Critical vulnerability in SolarWinds Dameware
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9, CVEs: CVE-2026-28336, Summary: SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.
-
· Cyber Centre Kanada CA
SolarWinds security advisory (AV26-1124)
Serial number: AV26-1124 Date: November 4, 2026 As of November 3, 2026, SolarWinds is affected by vulnerabilities in the following product: Dameware Prior to or equal to 2026.3.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Dameware 2026.3.1 release notes SolarWinds Security Vulnerabilities
-
· CSIRT Itálie (ACN) IT
Risolte vulnerabilità in SolarWinds Dameware
Aggiornamenti di sicurezza risolvono tre vulnerabilità, di cui una con gravità "critica" e due con gravità "alta", presenti in SolarWinds Dameware, nota soluzione di amministrazione remota e supporto IT utilizzata per la gestione, il controllo e l'assistenza di sistemi informatici. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente autenticato malintenzionato, anche da remoto per due di esse, di eseguire codice arbitrario sui sistemi interessati.
-
· zachyceno · CERT-FR – avis FR
Multiples vulnérabilités dans SolarWinds Dameware (04 novembre 2026)
De multiples vulnérabilités ont été découvertes dans SolarWinds Dameware. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un contournement de la politique de sécurité.