Vulnerability intelligence

CVE-2026-28307

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments.

CVSS Score

9.1

Critical

EPSS — Exploit Probability

0.0%

Riskier than 0% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

unknown

Check vendor advisories

NVD entry PoC / advisory

1 article across 1 outlet · first covered Jul 21, 2026 · latest Jul 21, 2026

Coverage timeline

SolarWinds Patches Three Critical Serv-U Vulnerabilities Enabling RCE
securityonline.info · Jul 21, 2026