CVE-2026-28327

HIGH 8.2

SolarWinds Dameware DLL Hijacking Vulnerability

CVSS Score

8.2

EPSS Score

0.0%

EPSS Percentile

0th

SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires access to the local machine and admin privileges.

CWE	CWE-427
Vendor	solarwinds
Product	dameware
Published	Nov 3, 2026

Stay Ahead of the Next One

Get instant alerts for solarwinds dameware

Be the first to know when new high vulnerabilities affecting solarwinds dameware are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

SolarWinds / Dameware

0 ≤ 2026.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

documentation.solarwinds.com: https://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htm solarwinds.com: https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28327

Credits

🔍 Luiz Felipe Mol (Confu53)