solarwinds Patch Manager vulnerabilities

Latest solarwinds Patch Manager CVEs

Newest publication first

1. CVE-2026-28331 SolarWinds Patch Manager Sensitive Information Exposure Vulnerability

   Published 2026-10-20

   Medium·CVSS 4.4

   SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges.

2. CVE-2021-35217 Insecure Deserialization of untrusted data causing Remote code execution vulnerability.

   Published 2021-09-08

   High·CVSS 8.8 EPSS 72.8%

   Insecure Deseralization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module and reported to us by ZDI. An Authenticated Attacker could exploit it by executing WSAsyncExecuteTasks deserialization of untrusted data...

3. CVE-2021-35218 Chart Endpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

   Published 2021-09-01

   High·CVSS 8.8 EPSS 76.4%

   Deserialization of Untrusted Data in the Web Console Chart Endpoint can lead to remote code execution. An unauthorized attacker who has network access to the Orion Patch Manager Web Console could potentially exploit this and compromise the server

4. CVE-2021-35216 Deserialization of Untrusted Data in Resource Controls Remote Code Execution

   Published 2021-09-01

   High·CVSS 8.8 EPSS 81.4%

   Insecure Deserialization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module. An Authenticated Attacker with network access via HTTP can compromise this vulnerability can result in Remote Code Execution.

5. CVE-2021-27240 This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged cod...

   Published 2021-03-29

   High·CVSS 7.8 EPSS 0.43%

   This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.