147 matches found
CVE-2026-28317
SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to privilege escalation. This issue requires domain administrator access. The impact is lower in Windows deployments...
CVE-2026-28321
SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute code as root. A domain administrator access is required, and the impact is lower in Windows installations...
CVE-2026-28308
SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to remote code execution. Domain administrator access is required. The impact is lower in Windows deployments...
CVE-2026-28306
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is lower in Windows deployments...
CVE-2026-28305
SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to remote code execution as root. A domain account with admin privileges and read and write access to the home directory is required. The impact is lower in Windows deployments...
CVE-2026-28310
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a system administrator. The impact is lower in Windows deployments...
CVE-2026-28321
SolarWinds Serv-U is affected by a broken access control vulnerability (CVE-2026-28321) that could allow arbitrary file read and write, enabling privilege escalation and code execution as root. A domain administrator access is required, and impact is lower on Windows installations. The provided c...
CVE-2026-28321 SolarWinds Serv-U Broken Access Control Vulnerability
SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute code as root. A domain administrator access is required, and the impact is lower in Windows installations...
EUVD-2026-46299
SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute code as root. A domain administrator access is required, and the impact is lower in Windows installations...
CVE-2026-28317 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability
SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to privilege escalation. This issue requires domain administrator access. The impact is lower in Windows deployments...
CVE-2026-28317
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation, requiring domain administrator access with impact higher on non-Windows deployments. The issue is described across CVE-2026-28317 records (NVD and CVE List) as an IDOR ...
EUVD-2026-46298
SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to privilege escalation. This issue requires domain administrator access. The impact is lower in Windows deployments...
CVE-2026-28316 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability
SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to privilege escalation to a system administrator with the ability to execute commands as the root user. This issue requires a domain account with administrator access. The impact is lower in...
EUVD-2026-46296
SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to privilege escalation to a system administrator with the ability to execute commands as the root user. This issue requires a domain account with administrator access. The impact is lower in...
EUVD-2026-46290
SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows deployments...
CVE-2026-28308
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. The issue requires domain administrator access, and impact is lower in Windows deployments. No exploitation status or remediation details are provided in the supplied ...
EUVD-2026-46289
SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to remote code execution. Domain administrator access is required. The impact is lower in Windows deployments...
CVE-2026-28306
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate privileges to a system administrator. The impact is reported as lower in Windows deployments. The CVE-2026-28306 entry details a high-severity issue (CVSS 3.1 base score 9.1) with n...
EUVD-2026-46287
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is lower in Windows deployments...
Keycloak 授权问题漏洞
Keycloak is an open-source identity and access management solution developed by Keycloak. There is a security vulnerability in Keycloak. This vulnerability stems from improper access control in the POST /admin/realms/realm/partialImport endpoint, which may allow limited administrators to bypass...