SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 05/06/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| serv-u | = 15.5.4< 15.5.4 | 15.5.4 |
SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free