Patch Manager (Solarwinds) - vulnerabilities (CVEs)

4 CVEs, 1 in the last 30 days, 16 known versions, newest CVE from 2026-10-20. Vendor: Solarwinds.

CVEs of Patch Manager

• CVE-2026-28331 - CVSS 4.4 (medium), 2026-10-20: SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges.
• CVE-2021-35217 - CVSS 8.9 (high), 2021-09-08: Insecure Deseralization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module and reported…
• CVE-2021-35216 - CVSS 8.9 (high), 2021-09-01: Insecure Deserialization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module. An…
• CVE-2021-35218 - CVSS 8.9 (high), 2021-09-01: Deserialization of Untrusted Data in the Web Console Chart Endpoint can lead to remote code execution. An unauthorized attacker who has network access to the…
• CVE-2021-27240 - CVSS 7.8 (high), 2021-03-29: This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain…