CVE Catalog
CVE-2026-28304
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.55%
42th percentile - higher than 42% of all known CVEs
Summary
SolarWinds Serv-U is affected by a remote code execution vulnerability that allows arbitrary code execution as root. Impact is lower on Windows deployments.
Risk Assessment
An attacker can remotely execute code as root, leading to full server compromise.
Recommendation
Update SolarWinds Serv-U to the latest version. Apply network segmentation and restrict access to the server.
Original NVD description (English source)
SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root. The impact is lower in Windows deployments.