← Back to CVE search

CVE-2026-28309

SolarWinds Serv-U

Description

SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows deployments.

CVSS 9.1EPSS 0.344%Risk 0.94
View source
Published
2026-07-21 16:17:08
Affected versions
unknown
Type
Critical software
Last modified
2026-07-24 18:44:45
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H