CVE Catalog
CVE-2026-28307
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.34%
27th percentile - higher than 27% of all known CVEs
Summary
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. Impact is lower in Windows deployments.
Risk Assessment
Risk of privilege escalation for an entire user group, potentially leading to unauthorized access to sensitive system functions.
Recommendation
Upgrade to the latest version of SolarWinds Serv-U and review/restrict user group permissions.
Original NVD description (English source)
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments.