← Back to CVE search

CVE-2026-28317

SolarWinds Serv-U

Description

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires domain administrator access. The impact is lower in Windows deployments.

CVSS 9.1EPSS 0.344%Risk 0.94
View source
Published
2026-07-21 16:17:10
Affected versions
unknown
Type
Critical software
Last modified
2026-07-24 18:38:44
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H