CVE-2020-10148VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2020-10148: SolarWinds Orion Authentication Bypass Vulnerability

Affects SolarWinds OrionSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 92.0% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2020-10148 (opens in a new tab)

Description

CVE-2020-10148 is an authentication bypass vulnerability in the SolarWinds Orion API that allows remote attackers to execute API commands without proper authentication. This vulnerability has been exploited in the wild and is considered high severity.

Summary

The SolarWinds Orion API contains an authentication bypass vulnerability (CVE-2020-10148) that enables remote attackers to execute API commands without valid authentication. This flaw is categorized under CWE-288 (Authentication Bypass). The vulnerability has been confirmed to be exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.

Impact

Successful exploitation allows remote attackers to bypass authentication controls and execute API commands on SolarWinds Orion, potentially leading to unauthorized access and control over the affected system. This can compromise the integrity and confidentiality of the system managed by the Orion platform.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Orion API to trusted networks and monitor for suspicious activity related to API usage.

Weaknesses

CWE-288Authentication Bypass Using Alternate Path (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 08:55:49 UTC

Weaknesses

References

Related threats