CVE-2026-28316

SolarWinds Serv-U on Windows is vulnerable to an insecure direct object reference (IDOR) that allows an attacker with a domain account and administrator access to escalate privileges to a system administrator, potentially executing commands as the root user. While the impact is less severe in Windows environments, organizations using this software should prioritize remediation to mitigate the risk of unauthorized access and command execution. System administrators and security teams should assess their deployments and apply necessary patches promptly.