NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in SolarWinds Serv-U
view advisory published 2026-07-27
SolarWinds heeft meerdere kwetsbaarheden verholpen in Serv-U.
01
describes (15)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-28321US | — | — | ||
SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute cod… | ||||
| CVE-2026-28317US | — | — | ||
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires domain administrator access. Th… | ||||
| CVE-2026-28316US | — | — | ||
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation to a system administrator with the ability to execut… | ||||
| CVE-2026-28315US | — | — | ||
SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability that could lead to session hijacking or information disclosure from an administrator accou… | ||||
| CVE-2026-28314US | — | — | ||
SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. User authentication is required. The impact is lower in Window… | ||||
| CVE-2026-28313US | — | — | ||
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover. The impact is lower… | ||||
| CVE-2026-28312US | — | — | ||
SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code execution as root. The impact is l… | ||||
| CVE-2026-28310US | —OT elevated | — | ||
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a system administrator. The impact i… | ||||
| CVE-2026-28309US | —OT elevated | — | ||
SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows de… | ||||
| CVE-2026-28308US | — | — | ||
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. The impac… | ||||
| CVE-2026-28307US | — | — | ||
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows dep… | ||||
| CVE-2026-28306US | — | — | ||
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is lower… | ||||
| CVE-2026-28305US | — | — | ||
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution as root. A domain account with admin privileges and… | ||||
| CVE-2026-28304US | — | — | ||
SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root. The impact is lower in Wind… | ||||
| CVE-2026-28302US | — | — | ||
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execution as root. This issue requir… | ||||
02
references
External citations — patches, advisories, analysis.
- Referenceexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan