PT-2026-61963 · Solarwinds · Serv-U

CVE-2026-28304 · Publicado 2026-07-21 · Atualizado 2026-07-21

NVD

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root. The impact is lower in Windows deployments.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2026-28304

Produtos afetados

Serv-U

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-28304 · Nota de Segurança
• https://solarwinds.com/trust-center/security-advisories/CVE-2026-28304 · Aviso do Fabricante
• https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_2026-3_release_notes.htm · Nota