CVE-2026-28331

SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges...

EUVD-2026-105173

SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges...

CVE-2026-28331

The SolarWinds Patch Manager software is susceptible to a Sensitive Information Exposure vulnerability (CWE-200). This flaw allows local users to access sensitive information, which could potentially be leveraged to gain elevated privileges . The vulnerability has a CVSS 3.1 base score of 4.4 (Me...

CVE-2026-28331 SolarWinds Patch Manager Sensitive Information Exposure Vulnerability

SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges...

CVE-2026-28331 SolarWinds Patch Manager Sensitive Information Exposure Vulnerability

SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges...

EUVD-2021-14005

Malware in sbrugna...

CVE-2021-27240

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

SolarWinds Patch Manager Chart Component Code Execution

The vulnerability of the Chart component in the SolarWinds Patch Manager software involves the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SolarWinds Patch Manager WSAsyncExecuteTasks Code Execution

The vulnerability of the WSAsyncExecuteTasks component in the SolarWinds Patch Manager software lies in the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SolarWinds Patch Manager EditResourceControls Code Execution

The vulnerability of the EditResourceControls component in the SolarWinds Patch Manager software relates to the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SolarWinds Patch Manager Chart Endpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Patch Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Chart endpoint...

PT-2021-6007

Name of the Vulnerable Software and Affected Versions SolarWinds Patch Manager affected versions not specified Description The issue is related to the deserialization of untrusted data in the Web Console Chart Endpoint, which can lead to remote code execution. An unauthorized attacker with networ...

PT-2021-5410

Name of the Vulnerable Software and Affected Versions SolarWinds Patch Manager affected versions not specified Description The issue is related to the insecure deserialization of untrusted data in the WSAsyncExecuteTasks component of the SolarWinds Patch Manager, allowing a remote attacker to...

PT-2021-5226

Name of the Vulnerable Software and Affected Versions SolarWinds Patch Manager affected versions not specified Description A remote code execution vulnerability due to insecure deserialization of untrusted data was discovered in the Patch Manager Orion Platform Integration module. An authenticate...

CVE-2021-27240

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

CVE-2021-27240

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

CVE-2021-27240

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

Deserialization of untrusted data

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

CVE-2021-27240

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...

CVE-2021-27240: Deserialization of Untrusted Data

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within th...