CVE-2026-28305
SolarWinds Serv-U contains a security flaw that allows an attacker to access and manipulate files they shouldn't be able to. This specific flaw can lead to an attacker taking full control of the system.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Users of SolarWinds Serv-U, specifically those using domain accounts with administrative privileges and read/write access to the home directory.
Real-world impact
An attacker with administrative privileges on a domain account could execute malicious code with root-level permissions, potentially taking complete control of the server.
Why this severity
This vulnerability is rated critical because it allows for full system compromise (confidentiality, integrity, and availability) via a network-based attack, though it requires existing administrative privileges to exploit.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources
Timeline
- Jul 21, 2026 · 11d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 24, 2026 · 8d agoAdvisory updatedThe NVD record was last revised.
How it’s attacked
References & advisories
- documentation.solarwinds.com/en/success_center/servu/con…release notesvendor advisory
- solarwinds.com/trust-center/security-advis…vendor advisory