SolarWinds Known Exploited Vulnerabilities
Evidence-backed KEV intelligence for SolarWinds products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.
Total KEVs
14
In CISA KEV
11
Beyond CISA KEV
3
Sensor Observed
0
Virtual Patch Available
0
SolarWinds KEVs Added by Year
14 SolarWinds KEVs added all time (primary attestation date).
Attested CVEs
| CVE | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2026-28318
SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability |
Serv-U | Confirmed | In CISA | 05 Jun 2026 |
|
CVE-2025-26399
SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability |
Web Help Desk | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-40536
SolarWinds Web Help Desk Security Control Bypass Vulnerability |
Web Help Desk | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2025-40551
SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability |
Web Help Desk | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2021-35250
Directory Transversal Vulnerability in Serv-U 15.3 |
Serv-U | High | Not in CISA | 26 Apr 2025 |
|
CVE-2016-3643
SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated... |
Virtualization Manager | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-35211
Serv-U Remote Memory Escape Vulnerability |
Serv-U Managed File Transfer Server and Serv-U Secured FTP | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2020-10148
SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands |
Orion Platform | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-35247
Improper Input Validation Vulnerability in Serv-U |
Serv-U | Confirmed | In CISA | 21 Jan 2022 |
|
CVE-2024-28995
SolarWinds Serv-U L Directory Transversal Vulnerability |
SolarWinds Serv-U | Confirmed | In CISA | 17 Jul 2024 |
|
CVE-2024-28986
SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability |
Web Help Desk | Confirmed | In CISA | 15 Aug 2024 |
|
CVE-2024-28987
SolarWinds Web Help Desk Hardcoded Credential Vulnerability |
Web Help Desk | Confirmed | In CISA | 15 Oct 2024 |
|
CVE-2024-0692
SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability |
Security Event Manager | High | Not in CISA | 01 Mar 2024 |
|
CVE-2021-35232
Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries |
Web Help Desk | High | Not in CISA | 27 Dec 2021 |
Common Vulnerability Classes (CWE)
- CWE-502 — Deserialization of Untrusted Data 4
- CWE-22 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2
- CWE-798 — Use of Hard-coded Credentials 2
- CWE-306 — Missing Authentication for Critical Function 1
- CWE-20 — Improper Input Validation 1
- CWE-693 — Protection Mechanism Failure 1
- CWE-787 — Out-of-bounds Write 1
- CWE-400 — Uncontrolled Resource Consumption 1
Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology