HackZoneLabs News
Newsletter

SolarWinds

11 vulnerabilities in SolarWinds products that CISA lists as exploited.

CVEVendorProductNameAddedFix dueRansomware
CVE-2026-28318SolarWindsServ-USolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability5 Jun 202619 Jun 2026Unknown
CVE-2025-26399SolarWindsWeb Help DeskSolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability9 Mar 202612 Mar 2026Known
CVE-2025-40536SolarWindsWeb Help DeskSolarWinds Web Help Desk Security Control Bypass Vulnerability12 Feb 202615 Feb 2026Unknown
CVE-2025-40551SolarWindsWeb Help DeskSolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability3 Feb 20266 Feb 2026Unknown
CVE-2024-28987SolarWindsWeb Help DeskSolarWinds Web Help Desk Hardcoded Credential Vulnerability15 Oct 20245 Nov 2024Unknown
CVE-2024-28986SolarWindsWeb Help DeskSolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability15 Aug 20245 Sep 2024Unknown
CVE-2024-28995SolarWindsServ-USolarWinds Serv-U Path Traversal Vulnerability17 Jul 20247 Aug 2024Unknown
CVE-2021-35247SolarWindsServ-USolarWinds Serv-U Improper Input Validation Vulnerability21 Jan 20224 Feb 2022Unknown
CVE-2016-3643SolarWindsVirtualization ManagerSolarWinds Virtualization Manager Privilege Escalation Vulnerability3 Nov 20213 May 2022Unknown
CVE-2020-10148SolarWindsOrionSolarWinds Orion Authentication Bypass Vulnerability3 Nov 20213 May 2022Unknown
CVE-2021-35211SolarWindsServ-USolarWinds Serv-U Remote Code Execution Vulnerability3 Nov 202117 Nov 2021Known