CyberSec.Space Logo
返回 CVE 浏览器

CVE-2026-28321

CRITICAL
9.1
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2026-07-21
Last Modified2026-07-24
Data SourcesNVD

Vulnerability Description

SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute code as root. A domain administrator access is required, and the impact is lower in Windows installations.

Affected Platforms (CPE)

📦
Solarwinds

Serv U

< 2026.3

References & Advisories

🔗 https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_2026-3_release_notes.htm
🔗 https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28321

相关漏洞威胁

CVE-2026-642987.1

In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC ...

CVE-2026-442105.8

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform...

CVE-2026-648232.1

Home Assistant Core before 2026.5.4 contains a cross-site scripting vulnerability in the Shelly integration's async_get_media_imag...

CVE-2026-283179.1

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. T...