LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor1 exploited in the wild

Solarwinds

17 CVEs published in the last four months and 1 stories. Exploited flaws first.

Critical15
High2
Medium0
Exploited (KEV)1

Patch these first

CVECVSSSeverityProductSummaryPublished
CVE-2026-28318exploited7.5highserv-uSolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authenti139d ago

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-283239.8criticalweb help deskSolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability.83d ago
CVE-2026-283139.1criticalserv-uSolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hi92d ago
CVE-2026-283149.1criticalserv-uSolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeov92d ago
CVE-2026-283029.1criticalserv-uSolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privile92d ago
CVE-2026-283049.1criticalserv-uSolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitra92d ago
CVE-2026-283059.1criticalserv-uSolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote 92d ago
CVE-2026-283069.1criticalserv-uSolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevat92d ago
CVE-2026-283079.1criticalserv-uSolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevat92d ago
CVE-2026-283179.1criticalserv-uSolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privile92d ago
CVE-2026-283219.1criticalserv-uSolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and wr92d ago
CVE-2026-283089.1criticalserv-uSolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote 92d ago
CVE-2026-283099.1criticalserv-uSolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to creat92d ago
CVE-2026-283109.1criticalserv-uSolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escala92d ago
CVE-2026-283129.1criticalserv-uSolarWinds Serv-U is affected by a privilege escalation vulnerability.92d ago
CVE-2026-283169.1criticalserv-uSolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privile92d ago
CVE-2026-282998.2highweb help deskSolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could141d ago
CVE-2026-28318exploited7.5highserv-uSolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authenti139d ago

Filter the full tracker by Solarwinds →

Our coverage of Solarwinds

CVE-2026-28299high

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

SolarWinds has released a patch for a critical vulnerability in its Access Rights Manager (ARM) software. The flaw, designated CVE-2026-28299, enables unauthenticated remote code execution. This issue stems from the presence of a hard-coded static key within the software. All versions of ARM preceding 2026.2.1 are affected by this vulnerability.