CVE-2025-40541 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
February 24, 2026
Last Seen
February 25, 2026

CVE-2025-40541 is a vulnerability tracked across 1 threat cluster and 4 intelligence report mentions on ThreatCluster. First observed February 24, 2026; most recent activity February 25, 2026.

Related Threat Clusters

  • Critical Vulnerabilities in SolarWinds Serv-U Software Patched

    SolarWinds has issued security updates for four critical remote code execution vulnerabilities in its Serv-U software, which could allow attackers to gain root access to unpatched servers. The affected software is used…

    19 articles · Updated February 24, 2026

Recent Intelligence Reports

  • Solarwinds Serv-U: Update patches four critical security vulnerabilities — Heise.De · February 25, 2026
  • New Serv-U bugs extend SolarWinds’ run of high — Csoonline · February 25, 2026
  • Patch these 4 critical, make-me-root SolarWinds bugs ASAP — Theregister · February 24, 2026
  • Patch these 4 critical, make-me — Theregister · February 24, 2026

Related Entities

Data Breach Malware Ransomware SolarWinds CVE-2025-40538 CVE-2025-40539 CVE-2025-40540 CVE-2025-40551 Insecure Direct Object Reference T1021 - Remote Services T1041 - Exfiltration Over C2 Channel T1059 - Command and Scripting Interpreter

CVSS v3.1 Breakdown