← Back to Vulnerability Reports CVE Intelligence

CVE-2026-28318

SolarWinds Serv-UHIGH · CVSS 7.5 In the wild In CISA KEV

What is CVE-2026-28318?

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update

CVSS7.5 NVD 3.1
SeverityHIGH
Exploitation In the wild In CISA KEV
EPSS7% · P91
Triage statusActive Exploit
ActionPatch immediately
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWECWE-400
NVD published2026-06-04
NVD last modified2026-06-05

CISA Known Exploited Vulnerability

SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

Added to KEV2026-06-05
Federal patch deadline2026-06-19
Known ransomware useUnknown

Affected product

SolarWinds Serv-U

Remediation Steps

  1. Apply the vendor patch from SolarWinds for Serv-U
  2. Review Serv-U resource usage and access controls
  3. Monitor file transfer logs for anomalous activity
  4. Restrict Serv-U access to required network segments only

Coverage on defend.network

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.

Get Critical CVE Alerts

Subscribe free and hear about actively exploited CVEs like this one first.