Solarwinds: >> Serv-U >> 15.5.4 Security Vulnerabilities
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments.
CVSS Score
9.1
EPSS Score
0.005
Published
2026-07-21
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. The impact is lower in Windows deployments.
CVSS Score
9.1
EPSS Score
0.008
Published
2026-07-21
SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows deployments.
CVSS Score
9.1
EPSS Score
0.005
Published
2026-07-21
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a system administrator. The impact is lower in Windows deployments.
CVSS Score
9.1
EPSS Score
0.005
Published
2026-07-21
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execution as root. This issue requires group administrator access. The impact is lower in Windows deployments.
CVSS Score
9.1
EPSS Score
0.007
Published
2026-07-21
CVE-2026-28318
SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update
Known exploited
CVSS Score
7.5
EPSS Score
0.4
Published
2026-06-04
Page 2