Skip to content
NewA calmer, faster ZeroHour
Vulnerability1

CVE-2026-28317

CVSS 3.1
9.1 critical
EPSS
<1%p41
Published
·
Modified
Analyze CVE-2026-28317 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires domain administrator access. The impact is lower in Windows deployments.

Vendors
solarwinds
Products
serv-u
Weakness
CWE-639
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

1 story