Is SolarWinds safe right now?
Nothing new in 90 days
No SolarWind flaws have been added to CISA's exploited list in the last 90 days (the most recent was Jun 5, 2026). Keep automatic updates on: that can change any day.
0exploited in the last 30 days
0in the last 90 days
2zero-days in 2026
11on CISA's list, all time
Earlier exploited flaws
- SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability Zero-day
- SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
- SolarWinds Web Help Desk Security Control Bypass Vulnerability
- SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Zero-day
- SolarWinds Web Help Desk Hardcoded Credential Vulnerability
- SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Zero-day
- SolarWinds Serv-U Path Traversal Vulnerability
- SolarWinds Serv-U Improper Input Validation Vulnerability
- SolarWinds Serv-U Remote Code Execution Vulnerability
- SolarWinds Orion Authentication Bypass Vulnerability
- SolarWinds Virtualization Manager Privilege Escalation Vulnerability
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 4 | 2 |
| 2025 | 0 | 0 |
| 2024 | 3 | 1 |
| 2023 | 0 | 0 |
| 2022 | 1 | 0 |
Questions
Is SolarWinds safe right now?
No SolarWind flaws have been added to CISA's exploited list in the last 90 days (the most recent was Jun 5, 2026). Keep automatic updates on: that can change any day. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many SolarWinds vulnerabilities have been exploited?
11 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks, 2 of them used by ransomware.
Covers products matching solarwinds. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.