Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-28318

SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability

Description

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SolarWinds Serv-U

Default version status: unaffected

  • 0 to ≤ 15.5.4affected

References