CVE-2021-35218

CVE-2021-35218 describes a critical deserialization of untrusted data vulnerability in the Web Console Chart Endpoint of SolarWinds Orion Platform, specifically affecting Orion Patch Manager. This flaw allows an unauthorized attacker with network access to the web console to achieve remote code execution, leading to a complete compromise of the server. With a CVSS score of 8.8 (High), it presents a significant risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no public exploit code (Metasploit, Nuclei, ExploitDB) or active exploitation (KEV) has been identified, and community discussion and media coverage are minimal, the high EPSS score suggests a non-negligible probability of future exploitation.