Actively exploited in the wild
SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
SolarWinds - Serv-U · Listed in the CISA KEV since 2026-06-05. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2026-28318
HighCVSS 7.5KEVExploitation Probability (EPSS)
Very high risk95th percentile - higher than 95% of all known CVEs
Summary
SolarWinds Serv-U is susceptible to specially crafted POST requests with Content-Encoding: deflate that crash the Serv-U service without authentication.
Risk Assessment
An attacker can cause a denial of service (DoS) by crashing the Serv-U service, potentially leading to file access disruption.
Recommendation
Apply the update or follow mitigation steps provided in the SolarWinds Trust Center.
Original NVD description (English source)
SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update