SolarWinds Serv-U

• CVE-2026-28318 High 7.5 Exploited SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability 43.7%
• CVE-2021-35247 Medium 4.3 Exploited Improper Input Validation Vulnerability in Serv-U 3.6%
• CVE-2026-28321 Critical 9.1 SolarWinds Serv-U Broken Access Control Vulnerability 0.6%
• CVE-2026-28317 Critical 9.1 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability 0.5%
• CVE-2026-28316 Critical 9.1 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability 2.1%
• CVE-2026-28315 Medium 6.2 SolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) Vulnerability 0.5%
• CVE-2026-28314 Critical 9.1 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability 0.6%
• CVE-2026-28313 Critical 9.1 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability 0.5%
• CVE-2026-28312 Critical 9.1 SolarWinds Serv-U Privilege Escalation Vulnerability 0.6%
• CVE-2026-28310 Critical 9.1 SolarWinds Serv-U Privilege Escalation Vulnerability 0.5%
• CVE-2026-28309 Critical 9.1 SolarWinds Serv-U Broken Access Control Vulnerability 0.5%
• CVE-2026-28308 Critical 9.1 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability 0.8%
• CVE-2026-28307 Critical 9.1 SolarWinds Serv-U Privilege Escalation Vulnerability 0.5%
• CVE-2026-28306 Critical 9.1 SolarWinds Serv-U Privilege Escalation Vulnerability 0.5%
• CVE-2026-28305 Critical 9.1 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability 0.8%
• CVE-2026-28304 Critical 9.1 SolarWinds Serv-U Remote Code Execution Vulnerability 0.8%
• CVE-2026-28302 Critical 9.1 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability 0.8%
• CVE-2025-40541 Critical 9.1 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability 0.6%
• CVE-2025-40540 Critical 9.1 SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability 0.5%
• CVE-2025-40539 Critical 9.1 SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability 0.5%
• CVE-2025-40538 Critical 9.1 SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability 0.5%
• CVE-2025-40549 Critical 9.1 SolarWinds Serv-U Path Restriction Bypass Vulnerability 1.1%
• CVE-2025-40548 Critical 9.1 SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability 0.8%
• CVE-2025-40547 Critical 9.1 SolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability 1.0%
• CVE-2024-45712 Low 2.6 SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability 0.4%
• CVE-2024-45711 High 7.5 SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability 6.3%
• CVE-2024-45714 Medium 4.8 SolarWinds Serv-U Stored XSS Vulnerability 0.9%
• CVE-2024-28072 Medium 5.7 Arbitrary File Overwrite Vulnerability 0.6%
• CVE-2023-40053 Medium 5.0 HTML injection Vulnerability in Serv-U 15.4 0.8%
• CVE-2023-40060 High 7.2 2FA/MFA Bypass Vulnerability in Serv-U 15.4 and 15.4 Hotfix 1 1.0%
• CVE-2023-35179 High 7.2 2FA/MFA Bypass Vulnerability in Serv-U 15.4 1.1%
• CVE-2021-35249 Medium 4.3 Domain Admin Broken Access Control 0.7%
• CVE-2021-35250 High 7.5 Directory Transversal Vulnerability in Serv-U 15.3 12.8%
• CVE-2021-35223 High 8.5 Execute Command Function Allows Remote Code Execution (RCE)Vulnerability 2.9%