CVE-2026-28304

CriticalCVSS 9.1/10Last modified Oct 24, 2026

Description

SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root. The impact is lower in Windows deployments.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

VendorProductVersions
SolarWindsServ-U15.5.4 HF1 and below

References

Timeline

Published
Jul 21, 2026
Last modified
Oct 24, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-283059.1SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution as root. A CVE-2026-283069.1SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a syCVE-2026-283079.1SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator gCVE-2026-283089.1SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain admCVE-2026-283099.1SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accCVE-2026-28314.9The MailArchiver plugin for WordPress is vulnerable to SQL Injection via the ‘logid’ parameter in all versions up to, and including, 4.5.0 dCVE-2026-283109.1SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to thatCVE-2026-283129.1SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allowCVE-2026-283139.1SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitraCVE-2026-283149.1SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. User authentication isCVE-2026-283156.2SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability that could lead to session hijacking or informatioCVE-2026-283169.1SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation to a system
CVE-2026-28304: Critical severity, CVSS 9.1 | Vulnix