{"id":"CVE-2026-28336","published":"2026-11-03T17:18:12.570","lastModified":"2026-11-04T05:18:54.760","description":"SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-20"],"vendors":[],"products":[],"references":[{"url":"https://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htm","tags":[]},{"url":"https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28336","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"SolarWinds Dameware contains a command injection vulnerability (CWE-20) allowing authenticated attackers to execute arbitrary commands on the remotely controlled host by injecting malicious input into an insufficiently sanitized parameter.","exploitability":"Exploitation requires valid authentication credentials and network access to the Dameware service, with no user interaction needed beyond initial login.","blast_radius":"Successful exploitation grants full system compromise of the target host, enabling data theft, lateral movement, and persistent backdoor installation across the compromised environment.","remediation":"Upgrade to SolarWinds Dameware version 2.590 or later, as this is the first version that addresses CVE-2026-28336.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["command-injection","authentication-required","remote-exploit"],"model":"garnet-coder","analyzedAt":"2026-11-04T09:43:28.725Z"}}