{"metadata": {"vulnerability": "CVE-2026-28336", "count": 30, "kinds": {"milestone": 7, "sighting": 13, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-02-26T14:47:03.211Z", "date_only": false, "value": "2026-02-26T14:47:03.211Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-28336", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": true, "value": "2026-10-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1459", "record": "CERTFR-2026-AVI-1459", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": true, "value": "2026-11-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1459", "record": "CERTFR-2026-AVI-1459", "field": "vendor_advisories.1.published_at", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-28336", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28336", "record": "FKIE_CVE-2026-28336", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-03T16:23:19.664Z", "date_only": false, "value": "2026-11-03T16:23:19.664Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-28336", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-03T16:23:19.664Z", "date_only": false, "value": "2026-11-03T16:23:19.664Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / SolarWinds", "record": "CVE-2026-28336", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-03T16:28:17.250Z", "date_only": false, "value": "2026-11-03T16:28:17.250610Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117553449970235503", "record": "CVE-2026-28336", "field": "creation_timestamp", "uuid": "f83e3b1b-a0a0-44d2-b35d-07afd210fbb3", "content": "CVE-2026-28336 SolarWinds Dameware Command Injection Vulnerability SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.\nhttps://www.cve.org/CVERecord?id=CVE-2026-28336https://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htmhttps://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28336#solarwinds #SolarWinds #Dameware#CVE_2026_28336#bot", "url": "https://infosec.exchange/users/cve/statuses/117553449970235503"}, {"timestamp": "2026-11-03T16:40:05.947Z", "date_only": false, "value": "2026-11-03T16:40:05.947740Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patchthecve.bsky.social/post/3mzgbp4hw3k2p", "record": "CVE-2026-28336", "field": "creation_timestamp", "uuid": "85707ccd-41d6-4052-b67c-94b422a4110f", "content": "CVE-2026-28336 CRITICAL (CVSS 9.9)\nSolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compr\nFix: https://patchthecve.com/cve/CVE-2026-28336.html", "url": "https://bsky.app/profile/patchthecve.bsky.social/post/3mzgbp4hw3k2p"}, {"timestamp": "2026-11-03T17:10:05.206Z", "date_only": false, "value": "2026-11-03T17:10:05.206092Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzgdeolktg22", "record": "CVE-2026-28336", "field": "creation_timestamp", "uuid": "7d1a7c26-d7a2-4759-853c-cda1ff6b7a21", "content": "CVE-2026-28336 - dameware\nThe Dameware remote\u2011control tool can be tricked into executing commands on the computer it manages, even though a user must first log in. If exploited, an attacker could take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dameware #solarwinds #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzgdeolktg22"}, {"timestamp": "2026-11-03T17:18:12Z", "date_only": false, "value": "2026-11-03T17:18:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PP7Q-RQC9-J3QP", "record": "GHSA-PP7Q-RQC9-J3QP", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-03T17:18:12.570Z", "date_only": false, "value": "2026-11-03T17:18:12.570", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28336", "record": "FKIE_CVE-2026-28336", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T17:45:23.458Z", "date_only": false, "value": "2026-11-03T17:45:23.458131Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dgwekwlak5kxx", "record": "CVE-2026-28336", "field": "creation_timestamp", "uuid": "dde7e159-1e72-4ea8-924b-20ad1c920542", "content": "CVE-2026-28336 - SolarWinds Dameware Command Injection Vulnerability\nCVE ID : CVE-2026-28336\n \n Published : Nov. 3, 2026, 4:23 p.m. | 41\u00a0minutes ago\n \n Description : SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compro...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/dgwekwlak5kxx"}, {"timestamp": "2026-11-03T17:48:32.436Z", "date_only": false, "value": "2026-11-03T17:48:32.436505Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzgfji25ah2w", "record": "CVE-2026-28336", "field": "creation_timestamp", "uuid": "d5b9598d-31c2-45d0-a027-39256f2e35da", "content": "\ud83d\udd34 CVE-2026-28336 - Critical (9.9)\n\nSolarWinds Dameware was found to be affected by a command injection vulnerability that could lead...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-28336/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzgfji25ah2w"}, {"timestamp": "2026-11-03T18:07:19.299Z", "date_only": false, "value": "2026-11-03T18:07:19.299082Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzggl3ip4z2t", "record": "CVE-2026-28336", "field": "creation_timestamp", "uuid": "05542eb7-670e-4c33-a758-c83a5df1dfdf", "content": "\ud83d\udea8 CVE-2026-28336 \u2014 CVSS 9.9 CRITICAL\n\nSolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the co...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-28336\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzggl3ip4z2t"}, {"timestamp": "2026-11-03T18:30:43.883Z", "date_only": false, "value": "2026-11-03T18:30:43.883966Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/fc-vulns.bsky.social/post/3mzghuwwdc32l", "record": "CVE-2026-28336", "field": "creation_timestamp", "uuid": "4fc2a6c1-f6ef-4027-b839-214aedc3644a", "content": "Watch this new critical. CVE-2026-28336 \u2014 CVSS 9.9.\n\nSolarWinds Dameware command injection can lead to compromise of the remotely controlled host. Auth required.\n\nhttps://www.fc-vulns.com/cve/CVE-2026-28336/\n\n#fcvulns #SolarWinds", "url": "https://bsky.app/profile/fc-vulns.bsky.social/post/3mzghuwwdc32l"}, {"timestamp": "2026-11-03T18:31:09Z", "date_only": false, "value": "2026-11-03T18:31:09Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PP7Q-RQC9-J3QP", "record": "GHSA-PP7Q-RQC9-J3QP", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T18:31:09Z", "date_only": false, "value": "2026-11-03T18:31:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PP7Q-RQC9-J3QP", "record": "GHSA-PP7Q-RQC9-J3QP", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-03T23:33:15.031Z", "date_only": false, "value": "2026-11-03T23:33:15.031356Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mzgyrucmge2q", "record": "CVE-2026-28336", "field": "creation_timestamp", "uuid": "24afc771-e2f6-451f-95ea-a749debb250f", "content": "SolarWinds Dameware 2026.3.1 fixes Dameware command injection flaw CVE-2026-28336 (CVSS 9.9), plus a buffer overflow and DLL hijacking bug.\n\n#SolarWinds #Dameware #CVE202628336 #CommandInjection #RemoteSupport #CVSS #PatchNow #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mzgyrucmge2q"}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1459", "record": "CERTFR-2026-AVI-1459", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1459", "record": "CERTFR-2026-AVI-1459", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1459", "record": "CERTFR-2026-AVI-1459", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-11-04T04:56:29.557Z", "date_only": false, "value": "2026-11-04T04:56:29.557Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-28336", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-04T04:56:29.557Z", "date_only": false, "value": "2026-11-04T04:56:29.557Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-28336", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-04T05:18:54.760Z", "date_only": false, "value": "2026-11-04T05:18:54.760", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28336", "record": "FKIE_CVE-2026-28336", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-04T05:24:43.583Z", "date_only": false, "value": "2026-11-04T05:24:43.583414Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threadlinqs.bsky.social/post/3mzhmgcx5g22z", "record": "CVE-2026-28336", "field": "creation_timestamp", "uuid": "3e03332e-0194-4f5f-b6ca-c493a4b43bfd", "content": "Dameware CVE-2026-28336: a low-priv login can inject commands and take over the remote host. https://intel.threadlinqs.com/threat/TL-2026-5211?utm_source=bluesky #ThreatIntel #CVE_2026_28336 #DameWare", "url": "https://bsky.app/profile/threadlinqs.bsky.social/post/3mzhmgcx5g22z"}, {"timestamp": "2026-11-04T18:41:48.592Z", "date_only": false, "value": "2026-11-04T18:41:48.592242Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/2pjjw7bg5rise", "record": "CVE-2026-28336", "field": "creation_timestamp", "uuid": "64b6b23d-a027-447f-8f65-af2fcf226325", "content": "\ud83d\udea8 CVE-2026-28336\nCVSS 9.9 / EPSS 1.63% / KEV: No\nTL;DR: SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is\u2026\nhttps://cvesentinel.com/report/CVE-2026-28336\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/2pjjw7bg5rise"}, {"timestamp": "2026-11-05T13:43:39.481Z", "date_only": false, "value": "2026-11-05T13:43:39.481794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatroundup.bsky.social/post/3mzkyrharkv2z", "record": "CVE-2026-28336", "field": "creation_timestamp", "uuid": "02f9fdce-4951-477b-b8ad-804c4406ecc2", "content": "New critical vulnerability in SolarWinds Dameware: CVE-2026-28336, CVSS 9.9. SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of\u2026 No public exploit reported yet. #CVE #vulnerability\n\nthreatroundup.com/cve/cve-2026...", "url": "https://bsky.app/profile/threatroundup.bsky.social/post/3mzkyrharkv2z"}, {"timestamp": "2026-11-06T19:28:32.475Z", "date_only": false, "value": "2026-11-06T19:28:32.475551Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mzo4j2v3cl2v", "record": "CVE-2026-28336", "field": "creation_timestamp", "uuid": "297c3101-99da-40a8-bf4e-73dd393885d7", "content": "SolarWinds Dameware \u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u653b\u6483\u8005\u304c\u30ea\u30e2\u30fc\u30c8\u30b7\u30b9\u30c6\u30e0\u3092\u5236\u5fa1\u53ef\u80fd\u306b\n\nSolarWinds \u306f\u3001\u540c\u793e\u306e\u30ea\u30e2\u30fc\u30c8\u30b5\u30dd\u30fc\u30c8\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2 Dameware \u306b\u91cd\u5927\u306a\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u8a8d\u8a3c\u6e08\u307f\u306e\u653b\u6483\u8005\u304c\u3001\u7ba1\u7406\u5bfe\u8c61\u306e\u30db\u30b9\u30c8\u3092\u9060\u9694\u304b\u3089\u4e57\u3063\u53d6\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f CVE-2026-28336 \u3068\u3057\u3066\u8b58\u5225\u3055\u308c\u3066\u304a\u308a\u3001CVSS \u30b9\u30b3\u30a2\u306f 9.9 \u3067", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mzo4j2v3cl2v"}, {"timestamp": "2026-11-06T19:33:39.942Z", "date_only": false, "value": "2026-11-06T19:33:39.942242Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mzo4safjty2c", "record": "CVE-2026-28336", "field": "creation_timestamp", "uuid": "98095835-cdc1-4af5-b8e5-67e3ac9970d8", "content": "SolarWinds Dameware \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u653b\u6483\u8005\u304c\u30ea\u30e2\u30fc\u30c8\u30b7\u30b9\u30c6\u30e0\u4e0a\u3067\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u53ef\u80fd\u306b\n\nSolarWinds\u306f\u3001\u30ea\u30e2\u30fc\u30c8\u64cd\u4f5c\u3055\u308c\u308b\u30db\u30b9\u30c8\u304c\u4fb5\u5bb3\u3055\u308c\u308b\u6050\u308c\u306e\u3042\u308b\u91cd\u5927\u306a\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u300cCVE-2026-28336\u300d\u306b\u5bfe\u51e6\u3059\u308b\u305f\u3081\u3001Dameware 2026.3.1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027\u306e\u6df1\u523b\u5ea6\u30b9\u30b3\u30a2\u306f9.9\u3067\u3059\u3002\u60aa\u7528\u306b\u306f\u8a8d\u8a3c\u304c\u5fc5\u8981\u3067\u3001\u8a8d\u8a3c\u4e0d\u8981\u306e\u653b\u6483\u3068\u306f\u533a\u5225\u3055\u308c\u307e\u3059\u3002 \u4fee\u6b63\u7248\u306f20", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mzo4safjty2c"}], "metrics": {"as_of": "2026-11-07T17:41:42.844Z", "anchors": {"origin": {"timestamp": "2026-11-03T16:23:19.664Z", "date_only": false, "value": "2026-11-03T16:23:19.664Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-28336", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-03T16:23:19.664Z", "date_only": false, "value": "2026-11-03T16:23:19.664Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-28336", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 350303.180147, "hours": 97.30643892972222, "days": 4.0544349554050925, "min_seconds": 350303.180147, "max_seconds": 350303.180147, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-03T16:23:19.664Z", "date_only": false, "value": "2026-11-03T16:23:19.664Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-28336", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-07T17:41:42.844Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}