SolarWinds: CISA KEV History
Every SolarWinds vulnerability in the CISA Known Exploited Vulnerabilities catalog: confirmed in-the-wild exploitation, addition timeline, and ransomware linkage. Rebuilt automatically on every site deploy.
Snapshot: 2026-09-08 · Source: CISA KEV Catalog · Full KEV dashboard
KEV entries
11
Added, last 12 months
4
Ransomware-linked
2
Latest addition
2026-06-05
SolarWinds KEV additions per month, last 24 months
Most-listed products: Web Help Desk, Serv-U, Orion, Virtualization Manager.
Latest 11 of 11 SolarWinds KEV entries
| CVE | Vulnerability | Added | Ransomware |
|---|---|---|---|
| CVE-2026-28318 | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | 2026-06-05 | No |
| CVE-2025-26399 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 2026-03-09 | Yes |
| CVE-2025-40536 | SolarWinds Web Help Desk Security Control Bypass Vulnerability | 2026-02-12 | No |
| CVE-2025-40551 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 2026-02-03 | No |
| CVE-2024-28987 | SolarWinds Web Help Desk Hardcoded Credential Vulnerability | 2024-10-15 | No |
| CVE-2024-28986 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 2024-08-15 | No |
| CVE-2024-28995 | SolarWinds Serv-U Path Traversal Vulnerability | 2024-07-17 | No |
| CVE-2021-35247 | SolarWinds Serv-U Improper Input Validation Vulnerability | 2022-01-21 | No |
| CVE-2020-10148 | SolarWinds Orion Authentication Bypass Vulnerability | 2021-11-03 | No |
| CVE-2021-35211 | SolarWinds Serv-U Remote Code Execution Vulnerability | 2021-11-03 | Yes |
| CVE-2016-3643 | SolarWinds Virtualization Manager Privilege Escalation Vulnerability | 2021-11-03 | No |
CVE links go to our explainer when one exists, otherwise to the NVD record.
Data: official CISA KEV catalog, fetched at build time. Figures may be reused with attribution to East Bay Cyber and CISA. See also the KEV Velocity Dashboard and all tracked vendors.