Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

SolarWinds: actively exploited vulnerabilities

11 vulnerabilities in SolarWinds products (Web Help Desk, Serv-U, Orion Platform…) are in CISA’s catalog of exploited vulnerabilities. Last added: June 5, 2026.

SolarWinds security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one SolarWinds category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

Follow a single SolarWinds product (Web Help Desk, Serv-U…) rather than the whole brand.

  • Web Help Desk5 vulnerabilities, Monitoring and ITSM
  • Serv-U4 vulnerabilities, File transfer (MFT)
  • Orion Platform1 vulnerability, Monitoring and ITSM
  • Virtualization Manager1 vulnerability, Monitoring and ITSM

Name used by CISA: SolarWinds. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this SolarWinds list.

  1. Rank 1

    SolarWinds Web Help DeskCVE-2025-26399

    SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Mar 9, 2026

  2. Rank 2

    SolarWinds Web Help DeskCVE-2025-40536

    SolarWinds Web Help Desk Security Control Bypass Vulnerability

    CVSS severity 9.8critical

    Added Feb 12, 2026

  3. Rank 3

    SolarWinds Web Help DeskCVE-2025-40551

    SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

    CVSS severity 9.8critical

    Added Feb 3, 2026

  4. Rank 4

    SolarWinds Serv-UCVE-2026-28318

    SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

    CVSS severity 7.5high

    Added Jun 5, 2026

  5. Rank 5

    SolarWinds Serv-UCVE-2021-35211

    SolarWinds Serv-U Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 10.0critical

    Added Nov 3, 2021

  6. Rank 6

    SolarWinds Web Help DeskCVE-2024-28986

    SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

    CVSS severity 9.8critical

    Added Aug 15, 2024

  7. Rank 7

    SolarWinds Orion PlatformCVE-2020-10148

    SolarWinds Orion Authentication Bypass Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  8. Rank 8

    SolarWinds Web Help DeskCVE-2024-28987

    SolarWinds Web Help Desk Hardcoded Credential Vulnerability

    CVSS severity 9.1critical

    Added Oct 15, 2024

  9. Rank 9

    SolarWinds Virtualization ManagerCVE-2016-3643

    SolarWinds Virtualization Manager Privilege Escalation Vulnerability

    CVE from 2016, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  10. Rank 10

    SolarWinds Serv-UCVE-2024-28995

    SolarWinds Serv-U Path Traversal Vulnerability

    CVSS severity 7.5high

    Added Jul 17, 2024

Show 1 more vulnerability
  1. Rank 11

    SolarWinds Serv-UCVE-2021-35247

    SolarWinds Serv-U Improper Input Validation Vulnerability

    CVSS severity 5.3medium

    Added Jan 21, 2022

Follow and verify

Get new SolarWinds vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.