CVE-2026-28312

CriticalCVSS 9.1

Published: 21/07/2026(UTC)Updated: 24/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

33th percentile - higher than 33% of all known CVEs

Summary

Privilege escalation vulnerability in SolarWinds Serv-U. An attacker can elevate group privileges to system administrator and execute code as root. Impact is lower on Windows.

Risk Assessment

Risk of full system compromise by an unprivileged user, leading to arbitrary code execution as root.

Recommendation

Apply SolarWinds patch. Restrict access and monitor user accounts.

Original NVD description (English source)

SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code execution as root. The impact is lower in Windows deployments.