CVE-2026-25599

CVE

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

November 4, 2026

Last Seen

November 4, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Command Injection Vulnerability in SolarWinds Dameware70.5

SolarWinds has disclosed a critical command injection vulnerability in its Dameware software, identified as CVE-2026-28336, with a CVSS score of 9.9. This flaw allows authenticated users with low privileges to execute arbitrary commands on remotely controlled hosts without user interaction. The vuln...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Command Injection Vulnerability in SolarWinds Dameware

2h ago·1 sources

Related Articles (2)

CVE-2026-25599: Missing Authentication, Clear-Text Transmission and Stored XSS in Orca Heat Pumps and Orca User Portal Threadlinqs Intelligence / 28min Every threat comes with one complete detection in Splunk SPL, Microsoft KQL and Sigma, free for everyone; a free account adds daily TL Creds to unlock the rest. As of 2026-11-04, Threadlinqs Intelligence publishes 9 detection rule(s) for TL-2026-5213 across Splunk SPL, Microsoft KQL and Sigma, covering 11 indicator(s) of compromise.

intel.threadlinqs.com·2h ago

CVE-2026-28336 - Exploits & Severity

Related Entities

Command Injection Orca Energy Slovenia CVE-2026-121615 CVE-2026-28336 CWE-306 - Missing Authentication For Critical Function CWE-319 - Cleartext Transmission Of Sensitive Information CWE-78 - OS Command Injection CWE-79 - Cross-site Scripting (xss)T1040 - Network Sniffing T1059 - Command and Scripting Interpreter T1185 - Browser Session Hijacking