SolarWinds known exploited vulnerabilities
The Beam CVE database tracks 11 known exploited vulnerabilities for SolarWinds: 7 critical, 3 high and 1 medium severity. The newest is CVE-2026-28318, published Jun 4, 2026.
These are the SolarWinds vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog: flaws with confirmed exploitation in the wild. Each entry links the vendor bulletin and CISA’s required action.
- Vulnerabilities tracked
- 11
- Critical
- 7
- Known exploited (CISA KEV)
- 11
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-28318
SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
high7.5ExploitedJun 4, 2026CVE-2025-40536
SolarWinds Web Help Desk Security Control Bypass Vulnerability
critical9.8ExploitedJan 28, 2026CVE-2025-40551
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
critical9.8ExploitedJan 28, 2026CVE-2025-26399
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
critical9.8ExploitedSep 23, 2025CVE-2024-28987
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
critical9.1ExploitedAug 21, 2024CVE-2024-28986
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
critical9.8ExploitedAug 13, 2024CVE-2024-28995
SolarWinds Serv-U Path Traversal Vulnerability
high7.5ExploitedJun 6, 2024CVE-2021-35247
SolarWinds Serv-U Improper Input Validation Vulnerability
medium5.3ExploitedJan 10, 2022CVE-2021-35211
SolarWinds Serv-U Remote Code Execution Vulnerability
critical10.0ExploitedJul 14, 2021CVE-2020-10148
SolarWinds Orion Authentication Bypass Vulnerability
critical9.8ExploitedDec 29, 2020CVE-2016-3643
SolarWinds Virtualization Manager Privilege Escalation Vulnerability
high7.8ExploitedJun 17, 2016
