ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2026-28308

—
CVSS 3.1
9.1 critical
EPSS
<1%p54
Published
()
Modified
Description

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. The impact is lower in Windows deployments.

Vendors
solarwinds
Products
serv-u
Weakness
CWE-639
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news

No ingested article mentions this CVE yet.