Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-28304

SolarWinds Serv-U Remote Code Execution Vulnerability

Description

SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root. The impact is lower in Windows deployments.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SolarWinds Serv-U

Default version status: unaffected

  • 15.5.4 HF1 and belowaffected

References