CVE-2026-28304

SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root. The impact is lower in Windows deployments.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.3 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_2026-3_release_notes.htm	Release Notes Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28304	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*

History

24 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) SolarWinds Serv-U está afectado por una vulnerabilidad de ejecución remota de código que, al ser explotada, puede permitir la ejecución arbitraria de código de forma remota como root. El impacto es menor en implementaciones de Windows.

Information

Published : 2026-07-21 16:17

Updated : 2026-10-24 20:10

NVD link : CVE-2026-28304

Mitre link : CVE-2026-28304

CVE.ORG link : CVE-2026-28304

JSON object : View

Products Affected

solarwinds

serv-u

CWE

CWE-284

Improper Access Control

{"id": "CVE-2026-28304", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-28304", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-23T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@solarwinds.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.3}]}, "affected": [{"source": "psirt@solarwinds.com", "affectedData": [{"vendor": "SolarWinds", "product": "Serv-U", "versions": [{"status": "affected", "version": "15.5.4 HF1 and below"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-21T16:17:08.050", "references": [{"url": "https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_2026-3_release_notes.htm", "tags": ["Release Notes", "Vendor Advisory"], "source": "psirt@solarwinds.com"}, {"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28304", "tags": ["Vendor Advisory"], "source": "psirt@solarwinds.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@solarwinds.com", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root. The impact is lower in Windows deployments."}, {"lang": "es", "value": "SolarWinds Serv-U est\u00e1 afectado por una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo que, al ser explotada, puede permitir la ejecuci\u00f3n arbitraria de c\u00f3digo de forma remota como root. El impacto es menor en implementaciones de Windows."}], "lastModified": "2026-10-24T20:10:00.137", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6CC041DF-D376-4F82-ABDD-61E3898A1C2A", "versionEndExcluding": "2026.3"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@solarwinds.com"}