A critical vulnerability (CVE-2026-28318) has been discovered in SolarWinds Serv-U, allowing attackers to crash servers through specially crafted POST requests without authentication. Added to the CISA's Known Exploited Vulnerabilities catalog, it poses high risks to corporate networks, prompting a federal mandate for remediation by June 19, 2026. Administrators are urged to upgrade to version 15.5.4 HF1 or implement firewall controls to block specific types of web requests acting as the attack vector.
CISA Warns of Actively Exploited SolarWinds Serv-U Flaw
CyberSIXT Evidence Panel
Article by CyberSIXT
Timeline Coverage
Swipe to explore timeline
-
Critical flaw in SolarWinds ServU lets attackers drain resources
cybersixt.com
-
CISA warns of DoS risk in SolarWinds Serv-U flaw CVE-2026-28318
-
Attackers exploit CVE-2026-28318 and Zip Slip in Collibra Agent
-
Verizon VoLTE flaw CVE-2026-28318 exposes calls to interception
-
SolarWinds ServU bug lets attackers drain system resources
-
Cryptographic Sanctuaries: OpenAI Unveils “Lockdown Mode” to Counter Prompt Injection Risks
-
CISA flags SolarWinds ServU DoS bug CVE-2026-28318 for patch
-
CISA Adds Exploited SolarWinds ServU DoS Vulnerability to KEV List
-
CISA Warns of Actively Exploited SolarWinds Serv-U Flaw
securityonline.info
-
CISA warns of exploited SolarWinds Serv-U flaw, urges patching
-
CISA warns of active SolarWinds ServU exploit CVE-2026-28318
-
CISA adds CVE‑2026‑28318 to KEV after SolarWinds ServU attacks