Dameware vulnerabilities
CVEs whose affected-version data names the Dameware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-28327High· 8.2SolarWinds Dameware DLL Hijacking Vulnerability
SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires access to the local machine and admin privileges.
▾ TwilightSolarWinds · DamewareEPSS 0.21%via CVEORG
CVE-2026-28336Critical· 9.9SolarWinds Dameware Command Injection Vulnerability
SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.
▾ MidnightSolarWinds · DamewareEPSS 1.6%via CVEORG
CVE-2026-28335High· 8.4SolarWinds Dameware Buffer Overflow Vulnerability
SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required.
▾ TwilightSolarWinds · DamewareEPSS 1.0%via CVEORG