PT-2026-61967 · Solarwinds · Serv-U

CVE-2026-28308 · Publicado 2026-07-21 · Atualizado 2026-07-21

NVD

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. The impact is lower in Windows deployments.

Correção

IDOR

Enumeração de Fraquezas

CWE-639

Identificadores relacionados

CVE-2026-28308

Produtos afetados

Serv-U

Referências · 3

• https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_2026-3_release_notes.htm · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-28308 · Nota de Segurança
• https://solarwinds.com/trust-center/security-advisories/CVE-2026-28308 · Aviso do Fabricante