CVE-2026-28317

SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to privilege escalation. This issue requires domain administrator access. The impact is lower in Windows deployments...

CVE-2026-28312

SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code execution as root. The impact is lower in Windows deployments...

CVE-2026-28313

SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover. The impact is lower in Windows deployments...

CVE-2026-28306

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is lower in Windows deployments...

CVE-2026-28310

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a system administrator. The impact is lower in Windows deployments...

CVE-2026-28317

SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation, requiring domain administrator access with impact higher on non-Windows deployments. The issue is described across CVE-2026-28317 records (NVD and CVE List) as an IDOR ...

EUVD-2026-46294

SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. User authentication is required. The impact is lower in Windows deployments...

EUVD-2026-46293

SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover. The impact is lower in Windows deployments...

CVE-2026-28312

SolarWinds Serv-U is affected by a privilege escalation vulnerability that would elevate a group’s access to system administrator and allow code execution as root; impact is lower in Windows deployments. CVSS metrics indicate a 9.1 base score (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). The provided do...

EUVD-2026-46291

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a system administrator. The impact is lower in Windows deployments...

CVE-2026-28310 SolarWinds Serv-U Privilege Escalation Vulnerability

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a system administrator. The impact is lower in Windows deployments...

CVE-2026-28309 SolarWinds Serv-U Broken Access Control Vulnerability

SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows deployments...

EUVD-2026-46290

SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows deployments...

EUVD-2026-46289

SolarWinds Serv-U is affected by an insecure direct object reference IDOR vulnerability that can lead to remote code execution. Domain administrator access is required. The impact is lower in Windows deployments...

CVE-2026-28307 SolarWinds Serv-U Privilege Escalation Vulnerability

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments...

EUVD-2026-46288

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments...

CVE-2026-28307

CVE-2026-28307 describes a privilege-escalation vulnerability in SolarWinds Serv-U where a domain user group can be elevated into an administrator group. The NVD/CVE listings state the impact is higher in general but lower in Windows deployments. The provided documents do not specify affected ver...

CVE-2026-28306 SolarWinds Serv-U Privilege Escalation Vulnerability

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is lower in Windows deployments...

EUVD-2026-46287

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is lower in Windows deployments...

CVE-2026-28306 SolarWinds Serv-U Privilege Escalation Vulnerability

SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system administrator. The impact is lower in Windows deployments...