CVE-2026-28313 - SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

Back Back to CVE browser

CRITICAL

SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

Published Jul 21, 2026

9.1

CRITICAL

CVSS 3.1

EPSS 0.50%

Description

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover. The impact is lower in Windows deployments.

Affected products

Vendor SolarWinds Product Serv-U Default
unaffected
- Version
  15.5.4 HF1 and below
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SolarWinds

Serv-U

unaffected

Version	Status	Constraints
15.5.4 HF1 and below	affected	-

Remediation

Vendor solution

SolarWinds recommends customers upgrade to Serv-U version 2026.3 as soon as is practical.

Weaknesses (1)

CWE-639

Authorization Bypass

References (3)

https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_2026-3_release_notes.htm
release-notesRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-46293
Advisory
https://https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28313
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_2026-3_release_notes.htm		release-notesRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-46293		Advisory
https://https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28313		vendor-advisoryVendor Advisory

Change history (189)

Sep 23, 2026, 18:48 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 23, 2026, 16:48 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 23, 2026, 12:49 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 23, 2026, 10:49 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 23, 2026, 08:49 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 23, 2026, 06:49 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 23, 2026, 04:49 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 23, 2026, 02:48 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 23, 2026, 00:48 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 22, 2026, 22:48 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 22, 2026, 20:49 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 22, 2026, 17:28 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 22, 2026, 15:28 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 22, 2026, 13:28 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 22, 2026, 11:28 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 22, 2026, 09:28 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 22, 2026, 07:38 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 22, 2026, 05:27 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 22, 2026, 03:29 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 22, 2026, 01:29 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 21, 2026, 23:27 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 21, 2026, 21:27 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 21, 2026, 19:27 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 21, 2026, 17:27 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 21, 2026, 15:27 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 21, 2026, 13:27 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 21, 2026, 11:27 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 21, 2026, 09:27 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 21, 2026, 04:33 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 21, 2026, 02:33 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 21, 2026, 00:35 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7
- CVSS severity
  changed from MEDIUM to CRITICAL
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS score
  changed from 4.7 to 9.1
Sep 20, 2026, 22:44 UTC MITRE
- CVSS severity
  changed from CRITICAL to MEDIUM
- CVSS vector
  changed from CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS score
  changed from 9.1 to 4.7