Patchfirst: SolarWinds vulnerabilitieshttps://patchfirst.co/vendor/solarwinds/New and newly exploited SolarWinds CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMTCVE-2026-28323: SolarWinds Web Help Desk SAML Authentication Bypass Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-28323/CVE-2026-28323Thu, 30 Jul 2026 00:00:00 GMTSolarWinds · Web Help Desk. Not in CISA KEV. EPSS 1.0% (higher than 63.6% of CVEs). CVSS 9.8 CRITICAL. Named in 5 threat reports. Priority 31.2 of 100.[KEV] CVE-2026-28318: SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-28318/CVE-2026-28318#kevFri, 05 Jun 2026 00:00:00 GMTSolarWinds · Serv-U. In CISA KEV since 2026-06-05. ENISA EUVD lists it as exploited. EPSS 43.7% (higher than 98.7% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499 Endpoint Denial of Service. Priority 73.0 of 100.kevpublic-exploitT1190T1499CVE-2026-28299: SolarWinds Web Help Desk Denial-of-Service Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-28299/CVE-2026-28299Tue, 02 Jun 2026 00:00:00 GMTSolarWinds · Web Help Desk. Not in CISA KEV. EPSS 0.7% (higher than 53.9% of CVEs). CVSS 8.2 HIGH. Named in 5 threat reports. Priority 29.0 of 100.[KEV] CVE-2025-26399: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-26399/CVE-2025-26399#kevMon, 09 Mar 2026 00:00:00 GMTSolarWinds · Web Help Desk. In CISA KEV since 2026-03-09, known ransomware use. ENISA EUVD lists it as exploited. EPSS 90.1% (higher than 99.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 84.8 of 100.kevransomwarepublic-exploitT1190T1059[KEV] CVE-2025-40536: SolarWinds Web Help Desk Security Control Bypass Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-40536/CVE-2025-40536#kevThu, 12 Feb 2026 00:00:00 GMTSolarWinds · Web Help Desk. In CISA KEV since 2026-02-12. ENISA EUVD lists it as exploited. EPSS 73.6% (higher than 99.47% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 74.8 of 100.kevpublic-exploitT1190T1078[KEV] CVE-2025-40551: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-40551/CVE-2025-40551#kevTue, 03 Feb 2026 00:00:00 GMTSolarWinds · Web Help Desk. In CISA KEV since 2026-02-03. ENISA EUVD lists it as exploited. EPSS 84.2% (higher than 99.69% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.8 of 100.kevpublic-exploitT1190T1059CVE-2025-40554: SolarWinds Web Help Desk Authentication Bypass Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-40554/CVE-2025-40554Wed, 28 Jan 2026 00:00:00 GMTSolarWinds · Web Help Desk. Not in CISA KEV. EPSS 60.6% (higher than 99.15% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 81.7 of 100.public-exploitCVE-2025-40553: SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-40553/CVE-2025-40553Wed, 28 Jan 2026 00:00:00 GMTSolarWinds · Web Help Desk. Not in CISA KEV. EPSS 68.0% (higher than 99.32% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 76.7 of 100.public-exploit[KEV] CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-28987/CVE-2024-28987#kevTue, 15 Oct 2024 00:00:00 GMTSolarWinds · Web Help Desk. In CISA KEV since 2024-10-15. ENISA EUVD lists it as exploited. EPSS 93.3% (higher than 99.84% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 69.3 of 100.kevpublic-exploitT1190T1005[KEV] CVE-2024-28986: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-28986/CVE-2024-28986#kevThu, 15 Aug 2024 00:00:00 GMTSolarWinds · Web Help Desk. In CISA KEV since 2024-08-15. ENISA EUVD lists it as exploited. EPSS 84.6% (higher than 99.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2024-28995: SolarWinds Serv-U Path Traversal Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-28995/CVE-2024-28995#kevWed, 17 Jul 2024 00:00:00 GMTSolarWinds · Serv-U. In CISA KEV since 2024-07-17. ENISA EUVD lists it as exploited. EPSS 99.6% (higher than 99.95% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 68.2 of 100.kevpublic-exploitT1190T1005CVE-2024-28075: SolarWinds ARM Deserialization of Untrusted Data Remote Code Executionhttps://patchfirst.co/cve/CVE-2024-28075/CVE-2024-28075Thu, 09 May 2024 00:00:00 GMTSolarWinds · Access Rights Manager. Not in CISA KEV. EPSS 78.0% (higher than 99.57% of CVEs). CVSS 9.0 CRITICAL. Priority 26.2 of 100.CVE-2024-0692: SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-0692/CVE-2024-0692Fri, 01 Mar 2024 00:00:00 GMTSolarWinds · Security Event Manager . Not in CISA KEV. EPSS 92.2% (higher than 99.82% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 66.8 of 100.public-exploitCVE-2024-23478: SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Executionhttps://patchfirst.co/cve/CVE-2024-23478/CVE-2024-23478Thu, 15 Feb 2024 00:00:00 GMTSolarWinds · Access Rights Manager. Not in CISA KEV. EPSS 81.6% (higher than 99.64% of CVEs). CVSS 8.0 HIGH. Priority 25.5 of 100.CVE-2023-23836: SolarWinds Platform Deserialization of Untrusted Data Vulnerabilityhttps://patchfirst.co/cve/CVE-2023-23836/CVE-2023-23836Wed, 15 Feb 2023 00:00:00 GMTSolarWinds · SolarWinds Platform. Not in CISA KEV. EPSS 80.3% (higher than 99.62% of CVEs). CVSS 7.2 HIGH. Priority 26.3 of 100.CVE-2022-38111: SolarWinds Platform Deserialization of Untrusted Data Vulnerabilityhttps://patchfirst.co/cve/CVE-2022-38111/CVE-2022-38111Wed, 15 Feb 2023 00:00:00 GMTSolarWinds · SolarWinds Platform. Not in CISA KEV. EPSS 84.8% (higher than 99.71% of CVEs). CVSS 7.2 HIGH. Priority 26.3 of 100.CVE-2022-38108: SolarWinds Platform Deserialization of Untrusted Datahttps://patchfirst.co/cve/CVE-2022-38108/CVE-2022-38108Thu, 20 Oct 2022 00:00:00 GMTSolarWinds · SolarWinds Platform. Not in CISA KEV. EPSS 65.9% (higher than 99.27% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. Priority 31.8 of 100.public-exploitCVE-2022-36958: SolarWinds Platform Deserialization of Untrusted Datahttps://patchfirst.co/cve/CVE-2022-36958/CVE-2022-36958Thu, 20 Oct 2022 00:00:00 GMTSolarWinds · SolarWinds Platform. Not in CISA KEV. EPSS 81.5% (higher than 99.64% of CVEs). CVSS 8.8 HIGH. Priority 28.0 of 100.CVE-2022-36961: Orion Platform SQL Injection Privilege Escalation Vulnerabilityhttps://patchfirst.co/cve/CVE-2022-36961/CVE-2022-36961Fri, 30 Sep 2022 00:00:00 GMTSolarWinds · Orion Platform. Not in CISA KEV. EPSS 74.3% (higher than 99.49% of CVEs). CVSS 8.8 HIGH. Priority 27.4 of 100.CVE-2021-35250: Directory Transversal Vulnerability in Serv-U 15.3https://patchfirst.co/cve/CVE-2021-35250/CVE-2021-35250Mon, 25 Apr 2022 00:00:00 GMTSolarWinds · Serv-U. Not in CISA KEV. EPSS 12.8% (higher than 96.3% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 66.1 of 100.public-exploit[KEV] CVE-2021-35247: SolarWinds Serv-U Improper Input Validation Vulnerabilityhttps://patchfirst.co/cve/CVE-2021-35247/CVE-2021-35247#kevFri, 21 Jan 2022 00:00:00 GMTSolarWinds · Serv-U. In CISA KEV since 2022-01-21. ENISA EUVD lists it as exploited. EPSS 3.5% (higher than 89% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application. Priority 59.5 of 100.kevT1190CVE-2021-35232: Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Querieshttps://patchfirst.co/cve/CVE-2021-35232/CVE-2021-35232Mon, 27 Dec 2021 00:00:00 GMTSolarWinds · Web Help Desk. Not in CISA KEV. EPSS 0.3% (higher than 25.3% of CVEs). CVSS 6.8 MEDIUM. Priority 46.4 of 100.[KEV] CVE-2021-35211: SolarWinds Serv-U Remote Code Execution Vulnerabilityhttps://patchfirst.co/cve/CVE-2021-35211/CVE-2021-35211#kevWed, 03 Nov 2021 00:00:00 GMTSolarWinds · Serv-U. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 91.2% (higher than 99.81% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 80.0 of 100.kevransomwarepublic-exploitT1190T1068[KEV] CVE-2020-10148: SolarWinds Orion Authentication Bypass Vulnerabilityhttps://patchfirst.co/cve/CVE-2020-10148/CVE-2020-10148#kevWed, 03 Nov 2021 00:00:00 GMTSolarWinds · Orion. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 92.0% (higher than 99.82% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2016-3643: SolarWinds Virtualization Manager Privilege Escalation Vulnerabilityhttps://patchfirst.co/cve/CVE-2016-3643/CVE-2016-3643#kevWed, 03 Nov 2021 00:00:00 GMTSolarWinds · Virtualization Manager. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 3.7% (higher than 89.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 66.4 of 100.kevpublic-exploitT1078T1068CVE-2021-35217: Insecure Deserialization of untrusted data causing Remote code execution vulnerability.https://patchfirst.co/cve/CVE-2021-35217/CVE-2021-35217Wed, 08 Sep 2021 00:00:00 GMTSolarWinds · Orion Platform. Not in CISA KEV. EPSS 72.8% (higher than 99.45% of CVEs). CVSS 8.9 HIGH. Priority 27.2 of 100.CVE-2021-35215: ActionPluginBaseView Deserialization of Untrusted Data RCEhttps://patchfirst.co/cve/CVE-2021-35215/CVE-2021-35215Wed, 01 Sep 2021 00:00:00 GMTSolarWinds · Orion Platform. Not in CISA KEV. EPSS 69.7% (higher than 99.37% of CVEs). CVSS 8.9 HIGH. Public exploit code exists. Priority 32.5 of 100.public-exploitCVE-2021-35218: Chart Endpoint Deserialization of Untrusted Data Remote Code Execution Vulnerabilityhttps://patchfirst.co/cve/CVE-2021-35218/CVE-2021-35218Wed, 01 Sep 2021 00:00:00 GMTSolarWinds · Patch Manager. Not in CISA KEV. EPSS 76.4% (higher than 99.54% of CVEs). CVSS 8.9 HIGH. Priority 27.2 of 100.CVE-2021-35216: Deserialization of Untrusted Data in Resource Controls Remote Code Executionhttps://patchfirst.co/cve/CVE-2021-35216/CVE-2021-35216Wed, 01 Sep 2021 00:00:00 GMTSolarWinds · Patch Manager. Not in CISA KEV. EPSS 81.4% (higher than 99.64% of CVEs). CVSS 8.9 HIGH. Priority 27.2 of 100.CVE-2021-31474: This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network…https://patchfirst.co/cve/CVE-2021-31474/CVE-2021-31474Fri, 21 May 2021 00:00:00 GMTSolarWinds · Network Performance Monitor. Not in CISA KEV. EPSS 93.9% (higher than 99.84% of CVEs). CVSS 9.8 CRITICAL. Priority 27.5 of 100.CVE-2020-27871: This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion…https://patchfirst.co/cve/CVE-2020-27871/CVE-2020-27871Wed, 10 Feb 2021 00:00:00 GMTSolarWinds · Orion Platform. Not in CISA KEV. EPSS 90.8% (higher than 99.8% of CVEs). CVSS 7.2 HIGH. Priority 25.0 of 100.