CVE-2025-40539

CVE

Threat entity extracted from intelligence sources

Frequency

4

occurrences

First Seen

February 24, 2026

Last Seen

February 25, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities in SolarWinds Serv-U Software Patched49.6

SolarWinds has issued security updates for four critical remote code execution vulnerabilities in its Serv-U software, which could allow attackers to gain root access to unpatched servers. The affected software is used for secure file transfers on Windows and Linux systems. The most severe flaw has...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Vulnerabilities in SolarWinds Serv-U Software Patched

Feb 24·19 sources

Related Articles (4)

Solarwinds Serv-U: Update patches four critical security vulnerabilities

Heise.De·Feb 25

New Serv-U bugs extend SolarWinds’ run of high

Csoonline·Feb 25

Patch these 4 critical, make-me-root SolarWinds bugs ASAP

Theregister·Feb 24

Patch these 4 critical, make-me

Theregister·Feb 24

Related Entities

Data Breach Insecure Direct Object Reference Malware Ransomware SolarWinds CVE-2025-40540 CVE-2025-40538 CVE-2025-40541 CVE-2025-40551 T1068 - Exploitation for Privilege Escalation T1136 - Create Account T1190 - Exploit Public-Facing Application