Patch Manager vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

PM

Product

Patch Manager

by SolarWinds · last CVE Oct 20, 2026

4

CVEs

0

On KEV

8.8

Max CVSS

1

New 30D

Vulnerabilities4 In the news0 Timeline

Severity mix

Critical 0High 3Medium 1Low 0

Severity

All severities4 Critical0 High3 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Patch Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-35217	8.8	73%	Sep 8	Insecure Deseralization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module and reported to us by ZDI Affected: through 2020.2.5
CVE-2021-35216	8.8	81%	Sep 1	Insecure Deserialization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module Affected: before 2020.2.6
CVE-2021-27240	7.8	0%	Mar 29	This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1 Affected: 2020.2.1
CVE-2026-28331	4.4	0%	Oct 20	SolarWinds Patch Manager Sensitive Information Exposure Vulnerability Affected: 2026.2 and all previous versions