CVE-2020-10148 Scanner
CVE-2020-10148 scanner - Authentication Bypass vulnerability in SolarWinds Orion
Used 2.2k times · 3.4k assets checked · url
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2020-10148
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
orion platformorion_platform
Updated Oct 23, 2026View on NVD →
S4E scanner
CVE history: orion platform
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →