CyberRota Analysis
AI-GeneratedSolarWinds Serv-U on Windows is vulnerable to an insecure direct object reference, allowing attackers to potentially take over user accounts with valid authentication. While the impact is somewhat mitigated in Windows environments, the critical severity of this vulnerability necessitates immediate attention from organizations using Serv-U to secure their accounts. Prioritization is essential for those managing sensitive data or user access to prevent unauthorized control.
CVE
CVE-2026-28314
Severity
CRITICAL
CVSS
9.1
EPSS
0.45%
Windows
Original NVD Description
SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. User authentication is required. The impact is lower in Windows deployments.
Related CVEs
Other vulnerabilities affecting the same vendor(s)