CISA KEV by vendor
SolarWinds vulnerabilities in the CISA KEV catalogue
11 SolarWinds entries in CISA's Known Exploited Vulnerabilities catalogue, 2 of them (18 percent) known to have been used in ransomware campaigns. First added 3 November 2021, latest 5 June 2026.
Data status: a source is stale
Last synced CISA catalogue version 2026.11.04 (released 4 November 2026) 1,768 entries Updated manually
11entries, 0.6% of the catalogue
2known ransomware use
0added in the last 7 days
0federal due dates in the next 14 days
Products
| Product, as CISA names it | Entries |
|---|---|
| Web Help Desk | 5 |
| Serv-U | 4 |
| Orion | 1 |
| Virtualization Manager | 1 |
Latest additions
| CVE | Product | Added | Due | Ransomware | CVSS | EPSS | SSVC | Exposed asset window |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-28318 | Serv-U | 2026-06-05 | 2026-06-19 | Unknown | 7.5 High | 43.6% | Auto, partial | 3 days |
| CVE-2025-26399 | Web Help Desk | 2026-03-09 | 2026-03-12 | Known | 9.8 Critical | 90.5% | Auto, total | 3 days + triage |
| CVE-2025-40536 | Web Help Desk | 2026-02-12 | 2026-02-15 | Unknown | 9.8 Critical | 73.5% | Not auto, total | 3 days + triage |
| CVE-2025-40551 | Web Help Desk | 2026-02-03 | 2026-02-06 | Unknown | 9.8 Critical | 84.1% | Auto, total | 3 days + triage |
| CVE-2024-28987 | Web Help Desk | 2024-10-15 | 2024-11-05 | Unknown | 9.1 Critical | 93.2% | Auto, total | 3 days + triage |
| CVE-2024-28986 | Web Help Desk | 2024-08-15 | 2024-09-05 | Unknown | 9.8 Critical | 84.6% | Auto, total | 3 days + triage |
| CVE-2024-28995 | Serv-U | 2024-07-17 | 2024-08-07 | Unknown | 7.5 High | 99.6% | Auto, partial | 3 days |
| CVE-2021-35247 | Serv-U | 2022-01-21 | 2022-02-04 | Unknown | 5.3 Medium | 3.6% | Not auto, partial | 14 days |
| CVE-2021-35211 | Serv-U | 2021-11-03 | 2021-11-17 | Known | 10.0 Critical | 91.1% | Not auto, total | 3 days + triage |
| CVE-2020-10148 | Orion | 2021-11-03 | 2022-05-03 | Unknown | 9.8 Critical | 91.9% | Auto, total | 3 days + triage |
All 11 entries
| CVE | Product | Added | Due | Ransomware | CVSS | EPSS | SSVC | Exposed asset window |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-28318 | Serv-U | 2026-06-05 | 2026-06-19 | Unknown | 7.5 High | 43.6% | Auto, partial | 3 days |
| CVE-2025-26399 | Web Help Desk | 2026-03-09 | 2026-03-12 | Known | 9.8 Critical | 90.5% | Auto, total | 3 days + triage |
| CVE-2025-40536 | Web Help Desk | 2026-02-12 | 2026-02-15 | Unknown | 9.8 Critical | 73.5% | Not auto, total | 3 days + triage |
| CVE-2025-40551 | Web Help Desk | 2026-02-03 | 2026-02-06 | Unknown | 9.8 Critical | 84.1% | Auto, total | 3 days + triage |
| CVE-2024-28987 | Web Help Desk | 2024-10-15 | 2024-11-05 | Unknown | 9.1 Critical | 93.2% | Auto, total | 3 days + triage |
| CVE-2024-28986 | Web Help Desk | 2024-08-15 | 2024-09-05 | Unknown | 9.8 Critical | 84.6% | Auto, total | 3 days + triage |
| CVE-2024-28995 | Serv-U | 2024-07-17 | 2024-08-07 | Unknown | 7.5 High | 99.6% | Auto, partial | 3 days |
| CVE-2021-35247 | Serv-U | 2022-01-21 | 2022-02-04 | Unknown | 5.3 Medium | 3.6% | Not auto, partial | 14 days |
| CVE-2021-35211 | Serv-U | 2021-11-03 | 2021-11-17 | Known | 10.0 Critical | 91.1% | Not auto, total | 3 days + triage |
| CVE-2020-10148 | Orion | 2021-11-03 | 2022-05-03 | Unknown | 9.8 Critical | 91.9% | Auto, total | 3 days + triage |
| CVE-2016-3643 | Virtualization Manager | 2021-11-03 | 2022-05-03 | Unknown | 7.8 High | 3.6% | Not auto, total | 3 days + triage |
Due dates bind US federal civilian executive branch agencies only (BOD 26-04). Filter SolarWinds in the tracker by date, score or status.
Source: CISA Known Exploited Vulnerabilities Catalog; NVD, FIRST EPSS and CISA SSVC for the scores. This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs.