ZeroDay Findings
Sign inSign up

Findings

CVE-2020-10148

SolarWinds Orion Authentication Bypass Vulnerability

Published Dec 29, 2020 · updated Jun 16, 2026 · solarwinds orion platform

The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 29, 2020 · Catalog

    Detected

    The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.

  2. Nov 3, 2021 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. May 3, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.

Required action

Apply updates per vendor instructions.

CISA due date May 3, 2022

Affected

  • cpe solarwinds/orion platform2019.4
  • cpe solarwinds/orion platform2020.2
  • cpe solarwinds/orion platform2020.2.1
  • vendor SolarWinds Orionversion unspecified

Sources

  • CISA KEVCVE-2020-10148

    SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands.

    cisa.gov
  • CVE.orgCVE-2020-10148

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2020-10148

    30-day exploitation probability 92.0%

    first.org
  • NIST NVDCVE-2020-10148

    The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds ins

    nvd.nist.gov

References

CVE-2020-10148 · ZeroDay Findings