Lucene search
+L

3463 matches found

Tenable Nessus
Tenable Nessus
•added 2026/06/09 12:00 a.m.•54 views

SolarWinds Serv-U 15.5.0 < 15.5.5

The version of SolarWinds Serv-U installed on the remote host is prior to 15.5.4 HF1. It is, therefore, affected by a vulnerability as referenced in the solarwindsserv-u1554hf1 advisory. - SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without...

7.5CVSS7.4AI score0.01942EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•36 views

SolarWinds Observability Self-Hosted 输入验证错误漏洞

SolarWinds Observability Self-Hosted is an observability platform developed by the American company SolarWinds. SolarWinds Observability Self-Hosted has a vulnerability related to input validation errors. This vulnerability arises when attackers can provide a specially crafted external URL,...

4.8CVSS5.3AI score0.00356EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/06/08 12:00 a.m.•31 views

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending a specially crafted POST request...

7.8CVSS6.1AI score0.01942EPSS
SaveExploits2References5
The Hacker News
The Hacker News
•added 2026/06/06 8:14 a.m.•26 views

CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a high-severity security flaw impacting SolarWinds Serv-U multi-protocol file server software to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as...

7.5CVSS5.6AI score0.01942EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2026/06/05 7:15 p.m.•31 views

CVE-2026-28318

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update...

7.5CVSS5.5AI score0.01942EPSS
SaveExploits2References1
CISA
CISA
•added 2026/06/05 12:00 p.m.•121 views

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-28318link is external SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability This type of vulnerability is a frequent attack vector for malicious...

7.5CVSS5.4AI score0.01942EPSS
SaveIn wildExploits2References6
NCSC
NCSC
•added 2026/06/05 8:34 a.m.•37 views

The vulnerability was exploited in SolarWinds Serv-U.

SolarWinds has identified a vulnerability in Serv-U. A malicious individual could exploit this vulnerability to cause a Denial-of-Service attack by sending a specially crafted POST message. SolarWinds has released a hotfix and published mitigation measures to address this vulnerability and preven...

7.5CVSS5.5AI score0.01942EPSS
SaveExploits2References2
CISA KEV Catalog
CISA KEV Catalog
•added 2026/06/05 12:00 a.m.•36 views

SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication...

7.5CVSS7.4AI score0.01942EPSS
SaveIn wildExploits2
VulnCheck KEV
VulnCheck KEV
•added 2026/06/05 12:00 a.m.•31 views

VulnCheck KEV: CVE-2026-28318

SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication...

7.5CVSS7.4AI score0.01942EPSS
SaveIn wildExploits2References4
NVD
NVD
•added 2026/06/04 3:16 p.m.•24 views

CVE-2026-28318

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update...

7.5CVSS0.01942EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
•added 2026/06/04 2:05 p.m.•18 views

CVE-2026-28318 SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update...

7.5CVSS7.4AI score0.01942EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2026/06/04 2:05 p.m.•18 views

CVE-2026-28318

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update...

7.5CVSS5.8AI score0.01942EPSS
SaveExploits2References3
CVE
CVE
•added 2026/06/04 2:05 p.m.•273 views

CVE-2026-28318

SolarWinds Serv-U is affected by an unauthenticated Denial of Service vulnerability triggered by specially crafted POST requests with Content-Encoding: deflate. The issue can crash the Serv-U service, with exploitation observed in reports and advisories. SolarWinds has released a hotfix and mitig...

7.5CVSS7.4AI score0.01942EPSS
SaveIn wildExploits2References3Affected Software1
Cvelist
Cvelist
•added 2026/06/04 2:05 p.m.•143 views

CVE-2026-28318 SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update...

7.5CVSS0.01942EPSS
SaveExploits2References2
Circl
Circl
•added 2026/06/04 11:54 a.m.•19 views

CVE-2026-28318

creationtimestamp| type| source ---|---|--- 2026-06-04 11:54:48+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-549 2026-06-05 17:46:15+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/6665471 2026-06-05 17:53:06+00:00| seen|...

7.5CVSS7.4AI score0.01942EPSS
SaveExploits2References57
RedhatCVE
RedhatCVE
•added 2026/06/04 4:01 a.m.•27 views

CVE-2026-28299

SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory...

8.2CVSS5.8AI score0.00711EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/04 12:00 a.m.•3 views

CVE-2026-28318: Uncontrolled Resource Consumption

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update...

7.5CVSS7.5AI score0.01942EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•25 views

SolarWinds Serv-U 资源管理错误漏洞

SolarWinds Serv-U is an FTP File Transfer Protocol server software developed by the American company SolarWinds. SolarWinds Serv-U has a resource management vulnerability that stems from unvalidated POST requests using the Content-Encoding: deflate header, which can lead to service crashes...

7.5CVSS5.8AI score0.01942EPSS
SaveExploits2References2
NVD
NVD
•added 2026/06/02 8:16 p.m.•29 views

CVE-2026-28299

SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory...

8.2CVSS0.00711EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/02 7:31 p.m.•18 views

CVE-2026-28299 SolarWinds Web Help Desk Denial-of-Service Vulnerability

SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory...

8.2CVSS5.8AI score0.00711EPSS
SaveExploits0References2
Rows per page
Query Builder