← Back to CVE search

CVE-2026-28308

SolarWinds Serv-U

Description

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. The impact is lower in Windows deployments.

CVSS 9.1EPSS 0.5459999999999999%Risk 0.95
View source
Published
2026-07-21 16:17:08
Affected versions
unknown
Type
Critical software
Last modified
2026-07-24 18:45:04
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H