Cyberfeed6 › Vendors › SolarWinds
CISA lists 11 SolarWinds vulnerabilities as exploited in real attacks, and 2 of them are known to be used in ransomware campaigns. Most entries concern Web Help Desk, Serv-U, Orion, Virtualization Manager.
Showing the 11 most recently added of 11. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2026-28318SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | Serv-U | 2026-06-05 | High (7.5) | No | Vendor notice |
| CVE-2025-26399SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | Web Help Desk | 2026-03-09 | Critical (9.8) | Yes | Vendor notice |
| CVE-2025-40536SolarWinds Web Help Desk Security Control Bypass Vulnerability | Web Help Desk | 2026-02-12 | High (8.1) | No | Vendor notice |
| CVE-2025-40551SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | Web Help Desk | 2026-02-03 | Critical (9.8) | No | Vendor notice |
| CVE-2024-28987SolarWinds Web Help Desk Hardcoded Credential Vulnerability | Web Help Desk | 2024-10-15 | Critical (9.1) | No | Vendor notice |
| CVE-2024-28986SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | Web Help Desk | 2024-08-15 | Critical (9.8) | No | Vendor notice |
| CVE-2024-28995SolarWinds Serv-U Path Traversal Vulnerability | Serv-U | 2024-07-17 | High (8.6) | No | Vendor notice |
| CVE-2021-35247SolarWinds Serv-U Improper Input Validation Vulnerability | Serv-U | 2022-01-21 | Medium (4.3) | No | |
| CVE-2021-35211SolarWinds Serv-U Remote Code Execution Vulnerability | Serv-U | 2021-11-03 | Critical (9.0) | Yes | |
| CVE-2020-10148SolarWinds Orion Authentication Bypass Vulnerability | Orion | 2021-11-03 | Critical (9.8) | No | |
| CVE-2016-3643SolarWinds Virtualization Manager Privilege Escalation Vulnerability | Virtualization Manager | 2021-11-03 | High (7.8) | No |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.