SolarWinds
CISA 가 실제 악용을 확인해 등재한 SolarWinds 제품 취약점입니다. 여기 있다는 것은 이미 공격에 쓰였다는 뜻이고, 없다는 것이 안전하다는 뜻은 아닙니다.
최근 등재
등재일 최신순입니다.
● 실제 악용이 확인됨CVE-2026-28318SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability1.9%높음7.5● 랜섬웨어 캠페인에 사용됨CVE-2025-26399SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability89.5%심각9.8● 실제 악용이 확인됨CVE-2025-40536SolarWinds Web Help Desk Security Control Bypass Vulnerability73.6%심각9.8● 실제 악용이 확인됨CVE-2025-40551SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability84.2%심각9.8● 실제 악용이 확인됨CVE-2024-28987SolarWinds Web Help Desk Hardcoded Credential Vulnerability93.3%심각9.1● 실제 악용이 확인됨CVE-2024-28986SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability84.6%심각9.8● 실제 악용이 확인됨CVE-2024-28995SolarWinds Serv-U Path Traversal Vulnerability99.6%높음7.5● 실제 악용이 확인됨CVE-2021-35247SolarWinds Serv-U Improper Input Validation Vulnerability3.5%보통5.3
등재된 제품
4종
Serv-U 4Web Help Desk 5Orion 1Virtualization Manager 1
전체 목록
SolarWinds · 11건
| CVE | 등재일 | 제품 | 취약점 이름 | 악용 확률 | 심각도 | 조치 기한 |
|---|---|---|---|---|---|---|
| CVE-2026-28318 | 2026-06-05 | Serv-U | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | 1.9% | 높음7.5 | 2026-06-19 |
| CVE-2025-26399 랜섬웨어 악용 | 2026-03-09 | Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerabili… | 89.5% | 심각9.8 | 2026-03-12 |
| CVE-2025-40536 | 2026-02-12 | Web Help Desk | SolarWinds Web Help Desk Security Control Bypass Vulnerability | 73.6% | 심각9.8 | 2026-02-15 |
| CVE-2025-40551 | 2026-02-03 | Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerabili… | 84.2% | 심각9.8 | 2026-02-06 |
| CVE-2024-28987 | 2024-10-15 | Web Help Desk | SolarWinds Web Help Desk Hardcoded Credential Vulnerability | 93.3% | 심각9.1 | 2024-11-05 |
| CVE-2024-28986 | 2024-08-15 | Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerabili… | 84.6% | 심각9.8 | 2024-09-05 |
| CVE-2024-28995 | 2024-07-17 | Serv-U | SolarWinds Serv-U Path Traversal Vulnerability | 99.6% | 높음7.5 | 2024-08-07 |
| CVE-2021-35247 | 2022-01-21 | Serv-U | SolarWinds Serv-U Improper Input Validation Vulnerability | 3.5% | 보통5.3 | 2022-02-04 |
| CVE-2020-10148 | 2021-11-03 | Orion | SolarWinds Orion Authentication Bypass Vulnerability | 92.0% | 심각9.8 | 2022-05-03 |
| CVE-2021-35211 랜섬웨어 악용 | 2021-11-03 | Serv-U | SolarWinds Serv-U Remote Code Execution Vulnerability | 91.2% | 심각10.0 | 2021-11-17 |
| CVE-2016-3643 | 2021-11-03 | Virtualization Manager | SolarWinds Virtualization Manager Privilege Escalation Vulnerability | 3.7% | 높음7.8 | 2022-05-03 |