CVE-2026-28318

🔥 Known Exploited (CISA KEV)HIGH

7.5

CVSS Severity Score

EPSS Score81.0090%

EPSS Percentile92.90th

Published2026-06-04

Last Modified2026-07-22

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm

🔗 https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28318

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-28318

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

相關漏洞威脅