Serv-U
SolarWinds · 55 CVEs
SolarWinds Serv-U Broken Access Control Vulnerability
Jul 21, 2026
SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability
Jul 21, 2026
SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability
Jul 21, 2026
SolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) Vulnerability
Jul 21, 2026
SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability
Jul 21, 2026
SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability
Jul 21, 2026
SolarWinds Serv-U Privilege Escalation Vulnerability
Jul 21, 2026
SolarWinds Serv-U Privilege Escalation Vulnerability
Jul 21, 2026
SolarWinds Serv-U Broken Access Control Vulnerability
Jul 21, 2026
SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability
Jul 21, 2026
SolarWinds Serv-U Privilege Escalation Vulnerability
Jul 21, 2026
SolarWinds Serv-U Privilege Escalation Vulnerability
Jul 21, 2026
SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability
Jul 21, 2026
SolarWinds Serv-U Remote Code Execution Vulnerability
Jul 21, 2026
SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability
Jul 21, 2026
SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability
Jun 4, 2026
SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability
Feb 24, 2026
SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability
Feb 24, 2026
SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability
Feb 24, 2026
SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability
Feb 24, 2026
SolarWinds Serv-U Path Restriction Bypass Vulnerability
Nov 18, 2025
SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability
Nov 18, 2025
SolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability
Nov 18, 2025
SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability
Apr 15, 2025
SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability
Oct 16, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-28321 | SolarWinds Serv-U Broken Access Control Vulnerability | CRITICAL | 0.58% | Jul 21, 2026 |
| CVE-2026-28317 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability | CRITICAL | 0.50% | Jul 21, 2026 |
| CVE-2026-28316 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability | CRITICAL | 2.13% | Jul 21, 2026 |
| CVE-2026-28315 | SolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) Vulnerability | MEDIUM | 0.52% | Jul 21, 2026 |
| CVE-2026-28314 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability | CRITICAL | 0.62% | Jul 21, 2026 |
| CVE-2026-28313 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability | CRITICAL | 0.50% | Jul 21, 2026 |
| CVE-2026-28312 | SolarWinds Serv-U Privilege Escalation Vulnerability | CRITICAL | 0.58% | Jul 21, 2026 |
| CVE-2026-28310 | SolarWinds Serv-U Privilege Escalation Vulnerability | CRITICAL | 0.50% | Jul 21, 2026 |
| CVE-2026-28309 | SolarWinds Serv-U Broken Access Control Vulnerability | CRITICAL | 0.50% | Jul 21, 2026 |
| CVE-2026-28308 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability | CRITICAL | 0.79% | Jul 21, 2026 |
| CVE-2026-28307 | SolarWinds Serv-U Privilege Escalation Vulnerability | CRITICAL | 0.50% | Jul 21, 2026 |
| CVE-2026-28306 | SolarWinds Serv-U Privilege Escalation Vulnerability | CRITICAL | 0.50% | Jul 21, 2026 |
| CVE-2026-28305 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability | CRITICAL | 0.79% | Jul 21, 2026 |
| CVE-2026-28304 | SolarWinds Serv-U Remote Code Execution Vulnerability | CRITICAL | 0.79% | Jul 21, 2026 |
| CVE-2026-28302 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability | CRITICAL | 0.79% | Jul 21, 2026 |
| CVE-2026-28318 KEV | SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability | HIGH | 1.94% | Jun 4, 2026 |
| CVE-2025-40541 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability | CRITICAL | 0.58% | Feb 24, 2026 |
| CVE-2025-40540 | SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability | CRITICAL | 0.45% | Feb 24, 2026 |
| CVE-2025-40539 | SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability | CRITICAL | 0.45% | Feb 24, 2026 |
| CVE-2025-40538 | SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability | CRITICAL | 0.51% | Feb 24, 2026 |
| CVE-2025-40549 | SolarWinds Serv-U Path Restriction Bypass Vulnerability | CRITICAL | 1.07% | Nov 18, 2025 |
| CVE-2025-40548 | SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability | CRITICAL | 0.70% | Nov 18, 2025 |
| CVE-2025-40547 | SolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability | CRITICAL | 0.89% | Nov 18, 2025 |
| CVE-2024-45712 | SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability | MEDIUM | 0.38% | Apr 15, 2025 |
| CVE-2024-45711 | SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability | HIGH | 6.29% | Oct 16, 2024 |
Showing 1 to 25 of 55 CVEs