Skip to content
NewA calmer, faster ZeroHour
Vulnerability1

CVE-2026-28302

CVSS 3.1
9.1 critical
EPSS
<1%p52
Published
·
Modified
Analyze CVE-2026-28302 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execution as root. This issue requires group administrator access. The impact is lower in Windows deployments.

Vendors
solarwinds
Products
serv-u
Weakness
CWE-639
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

1 story