CVE-2026-28318

CVE

Threat entity extracted from intelligence sources

Frequency

7

occurrences

First Seen

June 5, 2026

Last Seen

June 9, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Active Exploitation of SolarWinds Serv-U Flaw CVE-2026-2831872.9

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding the active exploitation of a high-severity vulnerability in SolarWinds Serv-U, tracked as CVE-2026-28318. This flaw allows remote attackers to crash the Serv-U service using specially crafted POST request...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Active Exploitation of SolarWinds Serv-U Flaw CVE-2026-28318

Jun 5·10 sources

Related Articles (7)

Cve 2026 28318

www.solarwinds.com·Jun 9

CISA Alerts on Actively Exploited SolarWinds Serv-U Denial-of

Gbhackers·Jun 6

CISA Warns of SolarWinds Serv

Cybersecuritynews·Jun 6

Hackers actively exploit SolarWinds Serv-U flaw to crash servers, CISA warns

Servu 15 5 4 Hotfix 1 Release Notes

documentation.solarwinds.com·Jun 5

1 / 2

Related Entities

Dev-0322 DDoS Zero-day Exploit SolarWinds CWE-22 - Path Traversal CWE-400 - Uncontrolled Resource Consumption Government T1190 - Exploit Public-Facing Application SolarWinds Serv-U Linux Windows Serv-U