SolarWinds
11 SolarWinds flaws are on CISA's list of vulnerabilities attackers have used, 4 of them added in 2026. CISA says 2 are known to be used by ransomware. The latest was added Jun 5, 2026.
11on CISA's list, all time
4added in 2026
0in the last 90 days
2used by ransomware
3zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Web Help Desk | 5 | Mar 9, 2026 |
| Serv-U | 4 | Jun 5, 2026 |
| Virtualization Manager | 1 | Nov 3, 2021 |
| Orion | 1 | Nov 3, 2021 |
Latest SolarWinds flaws
- Serv-USolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
- Web Help DeskSolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
- Web Help DeskSolarWinds Web Help Desk Security Control Bypass Vulnerability
- Web Help DeskSolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
- Web Help DeskSolarWinds Web Help Desk Hardcoded Credential Vulnerability
- Web Help DeskSolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
- Serv-USolarWinds Serv-U Path Traversal Vulnerability
- Serv-USolarWinds Serv-U Improper Input Validation Vulnerability
- Virtualization ManagerSolarWinds Virtualization Manager Privilege Escalation Vulnerability
- OrionSolarWinds Orion Authentication Bypass Vulnerability
- Serv-USolarWinds Serv-U Remote Code Execution Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.