CVE-2026-28305Disclosure(solarwinds / serv-u)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch solarwinds serv-u systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution as root. A domain account with admin privileges and read and write access to the home directory is required. The impact is lower in Windows deployments.

solarwinds CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

serv-u

Threat summary

Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 2d ago at 2 mentions (2026-07-21); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

solarwinds

Products

serv-u

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

375.0%

Patch

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-21	2	Disclosure2
2026-07-22	1	Patch1
2026-07-31	1	Disclosure1

Full discourse4 posts

CERT-PY@CERTpy81d
Disclosure
⚠️ Vulnerabilidades en productos SolarWinds ❗ CVE-2026-28305 ❗ CVE-2026-28304 ❗ CVE-2026-28302 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-solarwinds-4/ https://t.co/FOrErS8bEO
Post summary
The tweet announces three new SolarWinds CVEs and directs readers to a government link for further details.
00000185
6.7K followersView on X
TECHEPAGES@techepages91d
Patch
SolarWinds Serv-U 2026.3 patches 15 vulnerabilities — 14 Critical (CVSS 9.1) enabling privilege escalation to root RCE. List of all vulnerabilities reported in the latest security advisory: 🔵 CVE-2026-28302 🔵 CVE-2026-28304 🔵 CVE-2026-28305 🔵 CVE-2026-28306 🔵 CVE-2026-28307 🔵 CVE-2026-28308 🔵 CVE-2026-28309 🔵 CVE-2026-28310 🔵 CVE-2026-28311 🔵 CVE-2026-28312 🔵 CVE-2026-28313 🔵 CVE-2026-28314 🔵 CVE-2026-28315 (Medium — stored XSS) 🔵 CVE-2026-28316 🔵 CVE-2026-28317 🔵 CVE-2026-28321
Post summary
SolarWinds Serv-U 2026.3 released a patch for 15 CVEs, 14 of which are critical with CVSS 9.1, allowing root-level RCE; one CVE is medium severity (stored XSS).
0000041
31 followersView on X
Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-28305 SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution as root. A domain account with admin … https://www.cve.org/CVERecord?id=CVE-2026-28305 ----- Traducción: CVE-2026-28305 Sol… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑28305 for SolarWinds Serv‑U, detailing an IDOR vulnerability that can enable remote code execution with root privileges, but no PoC or exploitation evidence is provided.
0000036
94 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-28305 SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution as root. A domain account with admin … https://www.cve.org/CVERecord?id=CVE-2026-28305
Post summary
CVE‑2026‑28305 is an IDOR flaw in SolarWinds Serv‑U that can enable remote code execution as root; the post provides technical details but no PoC, exploit code, active use, or patch information.
00000962
57.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	solarwinds	serv-u	-	-	-

Explore more

Back to dashboard solarwinds CVEs serv-u vulnerabilities

What researchers are saying

CVE-2026-28305

TECHEPAGES[verified]@techepagesPatch

SolarWinds Serv-U 2026.3 released a patch for 15 CVEs, 14 of which are critical with CVSS 9.1, allowing root-level RCE; one CVE is medium severity (stored XSS).

CERT-PY@CERTpyDisclosure

The tweet announces three new SolarWinds CVEs and directs readers to a government link for further details.

Infoflowcloud@infoflowcloudDisclosure

The post announces CVE‑2026‑28305 for SolarWinds Serv‑U, detailing an IDOR vulnerability that can enable remote code execution with root privileges, but no PoC or exploitation evidence is provided.

CVE@CVEnewDisclosure

CVE‑2026‑28305 is an IDOR flaw in SolarWinds Serv‑U that can enable remote code execution as root; the post provides technical details but no PoC, exploit code, active use, or patch information.