Vulnerabilities Fixed in SolarWinds Serv-U

🗓️ 27 Jul 2026 10:38:46Reported by NCSCType

ncsc🔗 advisories.ncsc.nl👁 12 Views

SolarWinds fixes Serv-U IDOR and access flaws enabling privilege escalation and session hijack.

Reporter	Title	Published	Views	Family All 120
BDU FSTEC	The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication by using a user-controlled key, enabling them to execute arbitrary code.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, due to lack of access control mechanisms, allows attackers to elevate their privileges to the level of system administrators.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, due to lack of access control mechanisms, allows attackers to elevate their privileges to the level of system administrators.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication by using a user-controlled key, enabling them to execute arbitrary code.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to deficiencies in authentication procedures, allows attackers to create administrator accounts.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to deficiencies in authentication procedures, allows attackers to elevate their privileges to the level of system administrators.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication by using a user-controlled key. This enables attackers to elevate their privileges and execute arbitrary code.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SolarWinds Serv-U secure file sharing and transmission software, related to access control deficiencies, allows a perpetrator to execute arbitrary code as the root user.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to deficiencies in authentication procedures, allows a perpetrator to execute arbitrary code under the root user’s identity.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication using a user-controlled key, enabling them to escalate their privileges and gain unauthorized access to protected information.	9 Sep 202600:00	–	bdu_fstec

Source	Link
documentation	www.documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_2026-3_release_notes.htm

27 Jul 2026 10:38Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.19.1

EPSS0.02134

SSVC

direct object reference broken access control privilege escalation session hijack solarwinds serv-u