Dameware multiple flaws (DLL hijacking, remote code execution, command injection)

Flaws in Dameware remote support software could let attackers hack PCs!

Summary

SolarWinds Dameware 2026.3 and earlier has three flaws. The DLL hijacking flaw during installation needs local admin rights, while the buffer overflow and command injection need a login and can lead to remote code execution or takeover of the remotely controlled PC.

Affected when

Occurs only during installation
Local machine access
Admin rights

What to do

Update to Dameware 2026.3.1.

Products and platforms

Windows
Dameware

CVE IDs

CVE-2026-28327 (opens in a new tab)
CVE-2026-28335 (opens in a new tab)
CVE-2026-28336 (opens in a new tab)

Sources

Advisory: documentation.solarwinds.com (opens in a new tab) · solarwinds.com (opens in a new tab) · https (opens in a new tab) · solarwinds.com (opens in a new tab) · solarwinds.com (opens in a new tab)

Times

First published 2026-11-03 16:21 UTC

First seen 2026-11-09 14:50 UTC