Tag

Improper-Access-Control

2 briefs RSS

Remote Code Execution Vulnerability in SolarWinds Serv-U (CVE-2026-28304)

A critical remote code execution vulnerability (CVE-2026-28304) has been identified in SolarWinds Serv-U versions 15.5.4 HF1 and below, allowing an attacker with high privileges to execute arbitrary code remotely as root, posing a severe risk to affected systems, though with lower impact on Windows deployments.

Serv-U +1 remote-code-execution privilege-escalation vulnerability-exploitation vulnerability cve improper-access-control server software-update +5

5t 8c 3i Jul 21, 2026

high advisory

CVE-2025-71380: Authenticated Remote Code Execution in n8n via Execute Command Node

2 rules 6 TTPs 1 CVE

CVE-2025-71380 is an improper access control vulnerability (CWE-284) in n8n versions up to and including 1.114.4 that allows authenticated users to execute arbitrary commands on the underlying host system where n8n runs, potentially leading to data exfiltration, service disruption, or complete system compromise.

n8n <= 1.114.4 RCE vulnerability n8n workflow-automation command-execution improper-access-control

2r 6t 1c Jul 4, 2026