ZeusQA
Start free

Known exploited vulnerabilities

SolarWinds vulnerabilities attackers have used

Every SolarWinds vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 11 SolarWinds vulnerabilities as exploited in the wild, 4 of them added in the last 12 months and 2 used in ransomware campaigns. The most recent is CVE-2026-28318, added Jun 5, 2026. Web Help Desk has the most entries (5).

In KEV, all time
11
Added, last 12 months
4
Used in ransomware
2
New CVEs this week
0

By product

Web Help Desk (5), Serv-U (4), Orion (1), Virtualization Manager (1).

Every SolarWinds entry in CISA KEV

  1. CVE-2026-28318

    Added · due

    SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

    SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication.

  2. CVE-2025-26399

    RansomwareAdded · due

    SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

    SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine.

  3. CVE-2025-40536

    Added · due

    SolarWinds Web Help Desk Security Control Bypass Vulnerability

    SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauthenticated attacker to gain access to certain restricted functionality.

  4. CVE-2025-40551

    Added · due

    SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

    SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.

  5. CVE-2024-28987

    Added · due

    SolarWinds Web Help Desk Hardcoded Credential Vulnerability

    SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data.

  6. CVE-2024-28986

    Added · due

    SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

    SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution.

  7. CVE-2024-28995

    Added · due

    SolarWinds Serv-U Path Traversal Vulnerability

    SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine.

  8. CVE-2021-35247

    Added · due

    SolarWinds Serv-U Improper Input Validation Vulnerability

    SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability that allows attackers to build and send queries without sanitization.

  9. CVE-2021-35211

    RansomwareAdded · due

    SolarWinds Serv-U Remote Code Execution Vulnerability

    SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution.

  10. CVE-2020-10148

    Added · due

    SolarWinds Orion Authentication Bypass Vulnerability

    SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands.

  11. CVE-2016-3643

    Added · due

    SolarWinds Virtualization Manager Privilege Escalation Vulnerability

    SolarWinds Virtualization Manager allows for privilege escalation through leveraging a misconfiguration of sudo.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works