SolarWinds Dameware contains a command injection vulnerability (CVE-2026-28336) that requires authentication and could allow an attacker to compromise a remotely controlled host. The vulnerability has a critical CVSS score of 9.9, indicating high impact on confidentiality, integrity, and availability.