Patchfirst
Patchfirst

Vendor

SolarWinds

11 of 31 SolarWinds CVEs in Patchfirst (35%) are in of vulnerabilities exploited in the wild, 2 of them used by ransomware.

CVEs
31
In CISA KEV
1135%
Known ransomware use
2
Median days to KEV
41
from publication
Latest KEV listing
5 Jun 2026
Watch SolarWinds Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • Web Help Desk In KEV: 5 CVEs: 10
  • Serv-U In KEV: 4 CVEs: 5
  • Orion In KEV: 1 CVEs: 1
  • Virtualization Manager In KEV: 1 CVEs: 1
  • Orion Platform In KEV: 0 CVEs: 4
  • SolarWinds Platform In KEV: 0 CVEs: 4
  • Access Rights Manager In KEV: 0 CVEs: 2
  • Patch Manager In KEV: 0 CVEs: 2
  • Network Performance Monitor In KEV: 0 CVEs: 1
  • Security Event Manager In KEV: 0 CVEs: 0

Top ATT&CK techniques

What attackers do with SolarWinds CVEs
Open in ATT&CK Navigator

Counts are SolarWinds CVEs linked to the technique. Each link’s provenance is on the CVE page.

SolarWinds CVEs

31 CVEs, by priority
  1. CVE-2025-26399SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
    SolarWinds · Web Help DeskKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    90.1%Top 0.2%
    84.8priority
  2. CVE-2025-40554SolarWinds Web Help Desk Authentication Bypass Vulnerability
    SolarWinds · Web Help DeskPublic exploitCritical · 9.8
    60.6%Top 0.85%
    81.7priority
  3. CVE-2021-35211SolarWinds Serv-U Remote Code Execution Vulnerability
    SolarWinds · Serv-UKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation
    91.2%Top 0.19%
    80.0priority
  4. CVE-2025-40553SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
    SolarWinds · Web Help DeskPublic exploitCritical · 9.8
    68.0%Top 0.68%
    76.7priority
  5. CVE-2025-40551SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
    SolarWinds · Web Help DeskKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    84.2%Top 0.3%
    74.8priority
  6. CVE-2025-40536SolarWinds Web Help Desk Security Control Bypass Vulnerability
    SolarWinds · Web Help DeskKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    73.6%Top 0.53%
    74.8priority
  7. CVE-2026-28318SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
    SolarWinds · Serv-UKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499Endpoint Denial of Service
    43.7%Top 1.3%
    73.0priority
  8. CVE-2024-28986SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
    SolarWinds · Web Help DeskKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    84.6%Top 0.3%
    69.8priority
  9. CVE-2020-10148SolarWinds Orion Authentication Bypass Vulnerability
    SolarWinds · OrionKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    92.0%Top 0.18%
    69.8priority
  10. CVE-2024-28987SolarWinds Web Help Desk Hardcoded Credential Vulnerability
    SolarWinds · Web Help DeskKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System
    93.3%Top 0.16%
    69.3priority
  11. CVE-2024-28995SolarWinds Serv-U Path Traversal Vulnerability
    SolarWinds · Serv-UKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    99.6%Top 0.05%
    68.2priority
  12. CVE-2024-0692SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
    SolarWinds · Security Event Manager Public exploitHigh · 8.8
    92.2%Top 0.18%
    66.8priority
  13. CVE-2016-3643SolarWinds Virtualization Manager Privilege Escalation Vulnerability
    SolarWinds · Virtualization ManagerKEVPublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    3.7%Top 10%
    66.4priority
  14. CVE-2021-35250Directory Transversal Vulnerability in Serv-U 15.3
    SolarWinds · Serv-UPublic exploitHigh · 7.5
    12.8%Top 3.7%
    66.1priority
  15. CVE-2021-35247SolarWinds Serv-U Improper Input Validation Vulnerability
    SolarWinds · Serv-UKEVMedium · 5.3T1190Exploit Public-Facing Application
    3.5%Top 11%
    59.5priority
  16. CVE-2021-35232Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries
    SolarWinds · Web Help DeskMedium · 6.8
    0.3%Top 75%
    46.4priority
  17. CVE-2021-35215ActionPluginBaseView Deserialization of Untrusted Data RCE
    SolarWinds · Orion PlatformPublic exploitHigh · 8.9
    69.7%Top 0.63%
    32.5priority
  18. CVE-2022-38108SolarWinds Platform Deserialization of Untrusted Data
    SolarWinds · SolarWinds PlatformPublic exploitHigh · 7.2
    65.9%Top 0.73%
    31.8priority
  19. CVE-2026-28323SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability
    SolarWinds · Web Help DeskCritical · 9.85 reports
    1.0%Top 36%
    31.2priority
  20. CVE-2026-28299SolarWinds Web Help Desk Denial-of-Service Vulnerability
    SolarWinds · Web Help DeskHigh · 8.25 reports
    0.7%Top 46%
    29.0priority
  21. CVE-2022-36958SolarWinds Platform Deserialization of Untrusted Data
    SolarWinds · SolarWinds PlatformHigh · 8.8
    81.5%Top 0.36%
    28.0priority
  22. CVE-2021-31474This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network…
    SolarWinds · Network Performance MonitorCritical · 9.8
    93.9%Top 0.16%
    27.5priority
  23. CVE-2022-36961Orion Platform SQL Injection Privilege Escalation Vulnerability
    SolarWinds · Orion PlatformHigh · 8.8
    74.3%Top 0.51%
    27.4priority
  24. CVE-2021-35217Insecure Deserialization of untrusted data causing Remote code execution vulnerability.
    SolarWinds · Orion PlatformHigh · 8.9
    72.8%Top 0.55%
    27.2priority
  25. CVE-2021-35218Chart Endpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
    SolarWinds · Patch ManagerHigh · 8.9
    76.4%Top 0.46%
    27.2priority
  26. CVE-2021-35216Deserialization of Untrusted Data in Resource Controls Remote Code Execution
    SolarWinds · Patch ManagerHigh · 8.9
    81.4%Top 0.36%
    27.2priority
  27. CVE-2023-23836SolarWinds Platform Deserialization of Untrusted Data Vulnerability
    SolarWinds · SolarWinds PlatformHigh · 7.2
    80.3%Top 0.38%
    26.3priority
  28. CVE-2022-38111SolarWinds Platform Deserialization of Untrusted Data Vulnerability
    SolarWinds · SolarWinds PlatformHigh · 7.2
    84.8%Top 0.29%
    26.3priority
  29. CVE-2024-28075SolarWinds ARM Deserialization of Untrusted Data Remote Code Execution
    SolarWinds · Access Rights ManagerCritical · 9.0
    78.0%Top 0.43%
    26.2priority
  30. CVE-2024-23478SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution
    SolarWinds · Access Rights ManagerHigh · 8.0
    81.6%Top 0.36%
    25.5priority
  31. CVE-2020-27871This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion…
    SolarWinds · Orion PlatformHigh · 7.2
    90.8%Top 0.2%
    25.0priority
↑ ↓ chooseEnter openEsc close