Skip to content
NewA calmer, faster ZeroHour
AdvisorycriticalExploited in the wild

CISA Adds Actively Exploited SolarWinds Serv

The Hacker Newsby @TheHackersNews ()1 min read1 · 1 read
Analyze CVE-2026-28318 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-28318
Unauthenticated DoS in SolarWinds Serv-U via crafted Content-Encoding: deflate POSTs
7.544%KEV
KEV

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Jun 06, 2026 Vulnerability / Patch Management The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity security flaw impacting SolarWinds Serv-U multi-protocol file server software to its Known Exploited Vulnerabilities ( KEV ) catalog, citing evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.