CVE-2026-28315
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
Stored cross-site scripting (XSS) vulnerability in SolarWinds Serv-U. Can lead to session hijacking or information disclosure from an administrator account.
Risk Assessment
Risk of administrator session hijacking and access to sensitive data managed by Serv-U, potentially leading to full system compromise.
Recommendation
Apply the patch provided by SolarWinds and implement input/output filtering for data sent to Serv-U.
Other vulnerabilities in SolarWinds Serv-U
See all- CVE-2026-28321Critical
SolarWinds Serv-U suffers from a broken access control vulnerability that allows arbitrary file read/write, privilege escalation, and code execution as root. Domain administrator access is required; impact is lower on Windows.
- CVE-2026-28317Critical
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. Requires domain administrator access. Impact is lower in Windows deployments.
- CVE-2026-28316Critical
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation to a system administrator with the ability to execute commands as the root user. This issue requires a domain account with administrator access. The impact is lower in Windows deployments.
- CVE-2026-28314Critical
Vulnerability in SolarWinds Serv-U involving insecure direct object reference (IDOR) allows account takeover. Authentication is required, impact is lower on Windows deployments.
- CVE-2026-28313Critical
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover. Impact is lower in Windows deployments.
- CVE-2026-28312Critical
Privilege escalation vulnerability in SolarWinds Serv-U. An attacker can elevate group privileges to system administrator and execute code as root. Impact is lower on Windows.
- CVE-2026-28310Critical
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a system administrator. Impact is lower in Windows deployments.
- CVE-2026-28309Critical
SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. Impact is lower in Windows deployments.
- CVE-2026-28308Critical
SolarWinds Serv-U is affected by an IDOR vulnerability that can lead to remote code execution. Domain administrator access is required. Impact is lower on Windows deployments.
- CVE-2026-28307Critical
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. Impact is lower in Windows deployments.
Original NVD description (English source)
SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability that could lead to session hijacking or information disclosure from an administrator account.