# CVE-2026-28335: SolarWinds Dameware buffer overflow

Source: https://junglewise.ai/threats/cve-2026-28335-solarwinds-dameware-was-found-to-be-affected-by-a-buffer-overflow  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-03. Updated: 2026-11-03  
License: CC BY 4.0 with a link back

CVE-2026-28335 · Severity: high · CVSS 8.4 · Published 2026-11-03

SolarWinds Dameware is a remote desktop management tool used by enterprises to access and support systems. A buffer overflow vulnerability in versions 2026.3 and earlier allows authenticated users to execute arbitrary code on affected systems, potentially compromising network infrastructure and administrative access.

Technologies: [SolarWinds Dameware](https://junglewise.ai/threats/technologies/dameware). Vendors: [SolarWinds](https://junglewise.ai/threats/vendors/solarwinds).

## Quick answers

**Is CVE-2026-28335 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-28335 being exploited in the wild.

**How severe is CVE-2026-28335?** High severity, with a CVSS score of 8.4, published 3 November 2026.

**Which products and versions are affected?** SolarWinds Dameware 2026.3 and all previous versions.

**Is there a fix for CVE-2026-28335?** Yes: fixed in SolarWinds Dameware 2026.3.1. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-28335 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-28335?** Check whether you run SolarWinds Dameware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in SolarWinds Dameware 2026.3.1

## Technical details

A buffer overflow vulnerability exists in SolarWinds Dameware that allows remote code execution when exploited by an authenticated attacker. The vulnerability requires network access and valid authentication credentials. A fix is available in version 2026.3.1.

## Affected products

- SolarWinds Dameware 2026.3 and all previous versions

## Timeline

- 2026-11-03: disclosed
- 2026-11-03: patched: Fix released as version 2026.3.1

## References

- [https://https//documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htm](https://https//documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htm)
- [https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28335](https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28335)

## Related threats

- [SolarWinds Dameware command injection](https://junglewise.ai/threats/cve-2026-28336-solarwinds-dameware-was-found-to-be-affected-by-a-command)
- [SolarWinds Dameware DLL hijacking during installation](https://junglewise.ai/threats/cve-2026-28327-solarwinds-dameware-was-found-to-be-affected-by-a-dll-hijacking)