SolarWinds addressed three critical flaws in Serv

Securityaffairs.Co •Pierluigi Paganini • November 21, 2025

SolarWinds patched three critical vulnerabilities in its Serv-U file transfer solution that could allow remote code execution. SolarWinds addressed three critical vulnerabilities in its Serv-U file transfer solution that could allow remote code execution. The first vulnerability, tracked as CVE-2025-40549 (CVSS score 9.1), is a path restriction bypass issue that impacts Serv-U. An attacker with […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SolarWinds Serv-U Patches Critical Remote Code Execution Vulnerabilities SolarWinds has released security patches for three critical remote code execution vulnerabilities in its Serv-U software. These vulnerabilities, disclosed in version 15.5.3, could allow attackers with administrative privileges to execute arbitrary code on affected systems, posing significant risks to organizations using the file transfer software. 3 sources 42

Extracted Entities

SolarWinds addressed three critical flaws in Serv

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)