Orion Platform — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
November 20, 2025
Last Seen
June 17, 2026

Orion Platform is SolarWinds’ flagship network monitoring and IT infrastructure management platform.

Orion Platform is a technology platform tracked across 3 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed November 20, 2025; most recent activity June 17, 2026.

Overview

Orion Platform is SolarWinds’ flagship network monitoring and IT infrastructure management platform. It gained prominence due to its central role in the SolarWinds supply chain compromise, making it a focal point for organizational cybersecurity risk, security disclosures, and governance practices surrounding enterprise monitoring tools.

Related Threat Clusters

  • Critical Authentication Bypass in SolarWinds Orion API (CVE-2020-10148)

    The SolarWinds Orion API is vulnerable to an authentication bypass, allowing remote attackers to execute API commands without authentication. This vulnerability, identified as CVE-2020-10148, can be exploited by…

    3 articles · Updated June 17, 2026
  • SEC Drops Case Against SolarWinds Over 2020 Cyberattack

    The SEC has dropped its civil fraud case against SolarWinds and its CISO, Tim Brown, related to the 2020 SUNBURST cyberattack. This decision ends a significant legal action that aimed to hold the company accountable for…

    8 articles · Updated November 20, 2025
  • SEC Dismisses Case Against SolarWinds Over 2020 Cyberattack

    The SEC has dropped its case against SolarWinds and its CISO, Tim Brown, regarding their handling of a 2020 cyberattack linked to Russian hackers. The lawsuit, initiated in late 2023, accused them of failing to disclose…

    8 articles · Updated November 22, 2025

Recent Intelligence Reports

  • Securityadvisory — www.solarwinds.com · June 17, 2026
  • SEC drops civil fraud case against SolarWinds — Cybersecuritydive · November 20, 2025

Frequently asked questions

What is Orion Platform?

Orion Platform is SolarWinds’ flagship network monitoring and IT infrastructure management platform.

Is Orion Platform still active?

The most recent intelligence report mentioning Orion Platform on ThreatCluster is dated June 17, 2026. Activity was first observed November 20, 2025, giving a tracked span from then to June 17, 2026.

What is Orion Platform associated with?

Across ThreatCluster reporting, Orion Platform most frequently co-occurs with Malware, Supply Chain Attack, SolarWinds, Russia, Raindrop, among 10 tracked related entities.

What are the latest developments involving Orion Platform?

The most significant recent cluster is “Critical Authentication Bypass in SolarWinds Orion API (CVE-2020-10148)” (3 articles · Updated June 17, 2026). Orion Platform appears across 3 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on Orion Platform?

Orion Platform appears in 2 intelligence report mentions across 3 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown