Skip to content
Threat Feed
Subscribe

Product

Serv-U <= 15.5.4 HF1

1 brief RSS
critical advisory

SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Allows Privilege Escalation and RCE

A critical insecure direct object reference (IDOR) vulnerability, CVE-2026-28302, in SolarWinds Serv-U allows authenticated group administrators to achieve privilege escalation and remote code execution as root.

Serv-U +2 idor privilege-escalation rce file-transfer vulnerability solarwinds
3t 4c