CVE-2026-28302SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability

Beschreibung

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execution as root. This issue requires group administrator access. The impact is lower in Windows deployments.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28302 vendor-advisoryVendor Advisory
• https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_2026-3_release_notes.htm release-notesRelease Notes