Security vendor · Network visibility and traffic brokering · in CISA KEV

SolarWinds in the CISA KEV catalog

CISA’s Known Exploited Vulnerabilities catalog lists 11 entries for SolarWinds as of catalog version 2026.11.06, released November 6, 2026. The newest was added June 5, 2026, and the latest federal due date is June 19, 2026. CISA marks 2 of them as known ransomware use.

Updated November 7, 2026

entries in the catalog: 11
newest addition: June 5, 2026
latest federal due date: June 19, 2026
marked known ransomware use: 2

Directory record

Website: www.solarwinds.com
Categories: Network visibility and traffic brokering (primary), SIEM
Headquarters: HQ not established
Founded: Not established
Ownership: Ownership not established
Company record: SolarWinds on CISO Tribune

Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.

KEV entries, newest first

Filed by CISA under the name “SolarWinds”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.

Added June 5, 2026
CVE-2026-28318 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
Serv-U
Due June 19, 2026
Added March 9, 2026
CVE-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
Web Help Desk · known ransomware use
Due March 12, 2026
Added February 12, 2026
CVE-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability
Web Help Desk
Due February 15, 2026
Added February 3, 2026
CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
Web Help Desk
Due February 6, 2026
Added October 15, 2024
CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability
Web Help Desk
Due November 5, 2024
Added August 15, 2024
CVE-2024-28986 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
Web Help Desk
Due September 5, 2024
Added July 17, 2024
CVE-2024-28995 SolarWinds Serv-U Path Traversal Vulnerability
Serv-U
Due August 7, 2024
Added January 21, 2022
CVE-2021-35247 SolarWinds Serv-U Improper Input Validation Vulnerability
Serv-U
Due February 4, 2022
Added November 3, 2021
CVE-2021-35211 SolarWinds Serv-U Remote Code Execution Vulnerability
Serv-U · known ransomware use
Due November 17, 2021
Added November 3, 2021
CVE-2020-10148 SolarWinds Orion Authentication Bypass Vulnerability
Orion
Due May 3, 2022
Added November 3, 2021
CVE-2016-3643 SolarWinds Virtualization Manager Privilege Escalation Vulnerability
Virtualization Manager
Due May 3, 2022

Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.

On Daily CISO, newest first

Daily briefing · October 7, 2026
Former SolarWinds CISO Tim Brown named Chief Strategy Officer at Cytactic
Weekly archive · Jun 1 – Jun 7, 2026
CISA Adds SolarWinds Serv-U Flaw to Known Exploited Vulnerabilities Catalog
Weekly archive · Feb 2 – Feb 8, 2026
CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog
Weekly archive · Oct 14 – Oct 20, 2024
CISA Flags Windows, Firefox, and SolarWinds Flaws as Actively Exploited
Weekly archive · Sep 23 – Sep 29, 2024
PoC Published for Critical SolarWinds Web Help Desk Flaw
Weekly archive · Aug 12 – Aug 18, 2024
SolarWinds Web Help Desk Flaw Added to CISA's Exploited Vulnerabilities List
Weekly archive · Jul 15 – Jul 21, 2024
Serv-U, vCenter and Adobe Commerce flaws added to the KEV catalog

Sources

Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
CISO Tribune, vendor directory record for SolarWinds, published November 8, 2026