Vulnerability intelligence
CVE-2026-28307
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments.
CVSS Score
9.1
Critical
EPSS — Exploit Probability
0.5%
Riskier than 41% of all CVEs · checked 2026-09-05
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered Jul 21, 2026 · latest Jul 21, 2026
Coverage timeline
-
SolarWinds Patches Three Critical Serv-U Vulnerabilities Enabling RCEsecurityonline.info · Jul 21, 2026