https://exploit-radar.com/en/flux/marques/solarwinds.xml Exploit Radar: exploited SolarWinds vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for SolarWinds products. 2026-06-05T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-28318/ CVE-2026-28318 — SolarWinds Serv-U 2026-06-05T00:00:00Z Apply the patches or mitigations from SolarWinds; if none are available, stop using the product. For cloud services, follow the guidance from SolarWinds. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 5, 2026. https://exploit-radar.com/en/cve/CVE-2025-26399/ CVE-2025-26399 — SolarWinds Web Help Desk 2026-03-09T00:00:00Z Apply the patches or mitigations from SolarWinds; if none are available, stop using the product. For cloud services, follow the guidance from SolarWinds. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 9, 2026. https://exploit-radar.com/en/cve/CVE-2025-40536/ CVE-2025-40536 — SolarWinds Web Help Desk 2026-02-12T00:00:00Z Apply the patches or mitigations from SolarWinds; if none are available, stop using the product. For cloud services, follow the guidance from SolarWinds. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on February 12, 2026. https://exploit-radar.com/en/cve/CVE-2025-40551/ CVE-2025-40551 — SolarWinds Web Help Desk 2026-02-03T00:00:00Z Apply the patches or mitigations from SolarWinds; if none are available, stop using the product. For cloud services, follow the guidance from SolarWinds. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on February 3, 2026. https://exploit-radar.com/en/cve/CVE-2024-28987/ CVE-2024-28987 — SolarWinds Web Help Desk 2024-10-15T00:00:00Z Apply the patches or mitigations from SolarWinds; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 15, 2024. https://exploit-radar.com/en/cve/CVE-2024-28986/ CVE-2024-28986 — SolarWinds Web Help Desk 2024-08-15T00:00:00Z Apply the patches or mitigations from SolarWinds; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 15, 2024. https://exploit-radar.com/en/cve/CVE-2024-28995/ CVE-2024-28995 — SolarWinds Serv-U 2024-07-17T00:00:00Z Apply the patches or mitigations from SolarWinds; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 17, 2024. https://exploit-radar.com/en/cve/CVE-2021-35247/ CVE-2021-35247 — SolarWinds Serv-U 2022-01-21T00:00:00Z Apply the security update from SolarWinds. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on January 21, 2022. https://exploit-radar.com/en/cve/CVE-2021-35211/ CVE-2021-35211 — SolarWinds Serv-U 2021-11-03T00:00:00Z Apply the security update from SolarWinds. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-10148/ CVE-2020-10148 — SolarWinds Orion Platform 2021-11-03T00:00:00Z Apply the security update from SolarWinds. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2016-3643/ CVE-2016-3643 — SolarWinds Virtualization Manager 2021-11-03T00:00:00Z Apply the security update from SolarWinds. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.