CVE-2021-35222: SolarWinds Orion Platform

Critical severity, CVSS 9.6. EPSS: 2.6% chance of exploitation in the next 30 days.

This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a Remote Code Execution (RCE) from the Alerts Settings page.

Affected products

  • SolarWinds Orion Platform: before 2020.2.6 (fixed in 2020.2.6)

Published 2021-08-31. Last modified 2026-06-17.