Back Csa.Sg

Multiple Critical Vulnerabilities in SolarWinds Serv-U

Csa.Sg • July 23, 2026

Attackers can exploit two critical vulnerabilities in SolarWinds Serv-U to perform remote code execution. Patch immediately.

SolarWinds has released security updates to address two vulnerabilities (CVE-2026-28304 and CVE-2026-28311) affecting SolarWinds Serv-U. SolarWinds Serv-U is a multi-protocol file server capable of sending and receiving files from other networked computers.

These vulnerabilities have a Common Vulnerability Scoring System (CVSS v3.1) score of 9.1 out of 10.

Successful exploitation of these vulnerabilities could lead to the following:

CVE-2026-28304: A remote code execution vulnerability that can allow an attacker to execute arbitrary code as root.

CVE-2026-28311: A remote code execution vulnerability that can allow a domain administrator to modify how the application behaves and perform remote code execution.

These vulnerabilities affect SolarWinds Serv-U versions 15.5.4 HF1 and below.

Users and administrators of affected products are advised to update to the latest versions immediately.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in SolarWinds Serv-U Require Immediate Patching SolarWinds has identified 15 critical vulnerabilities in its Serv-U software, including two that allow remote code execution (RCE). The vulnerabilities, with CVSS scores of 9.1, affect versions 15.5.4 HF1 and below, as well as Serv-U 2026.3. Attackers can exploit these vulnerabilities to execute arbitrary code and escalate privileges. The vulnerabilities were published on 2026-07-21, and users are urged to apply patches immediately to mitigate risks. The Serv-U software is widely used for managed file transfers, making it a significant target for cybercriminals. Previous incidents, such as the MOVEit attacks, highlight the dangers of unpatched vulnerabilities in data transfer solutions. Administrators are advised to review the release notes for detailed information on the vulnerabilities and the necessary updates. 6 sources 73

Extracted Entities

CVEs (2)

CVE-2026-28304 CVE-2026-28311

Platforms (1)

SolarWinds Serv-U