SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

Description

References

• documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm · Release Notes
• solarwinds.com/trust-center/security-advisories/CVE-2026-28318 · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2026-28318

serv-u 的其他漏洞

• CVE-2026-28321严重 9.1SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be use…
• CVE-2026-28317严重 9.1SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue …
• CVE-2026-28316严重 9.1SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation to a system …
• CVE-2026-28315中危 6.2SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability that could lead to session hijacking or informatio…
• CVE-2026-28314严重 9.1SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. User authentication is…