SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-28305

CRITICAL · CVSS 9.1 EPSS 0.55% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-21 · Last synced 2026-08-20

CyberRota Analysis

AI-Generated

SolarWinds Serv-U on Windows is vulnerable to an insecure direct object reference (IDOR) flaw that allows for remote code execution with root privileges, contingent upon having a domain account with admin rights and access to the home directory. While the impact is less severe in Windows environments, organizations using this software should prioritize patching to mitigate potential exploitation risks. Administrators and security teams managing SolarWinds Serv-U installations should take immediate action to address this critical vulnerability.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-28305
Severity
CRITICAL
CVSS
9.1
EPSS
0.55%
Windows

Original NVD Description

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution as root. A domain account with admin privileges and read and write access to the home directory is required. The impact is lower in Windows deployments.

Related CVEs

Other vulnerabilities affecting the same vendor(s)