CVE-2026-28309

A broken access control vulnerability in SolarWinds Serv-U allows a domain administrator to create system administrator accounts, potentially leading to unauthorized access and privilege escalation. While the impact is lower in Windows deployments, organizations using this software should prioritize remediation due to the critical nature of the vulnerability. System administrators and security teams should assess their environments for affected versions and implement necessary patches or mitigations.