CVE-2026-28307 in Serv-U

الملخص

بحسب MITRE • 21/07/2026

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• مسؤول: SolarWinds
• حجز: 26/02/2026
• إفشاء: 21/07/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-380955
• CPE: جاهز
• CWE: غير معروف
• CVSS: 6.3 (VulDB)
• EPSS: 0.00344
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Finance, Government, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-28307
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-28307
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-28307/