EXPOSURES › CVE-2026-28308
CVE-2026-28308
CRITICAL
DETAIL
SourceNVD · cve
Published2026-07-21
CVSS9.1
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-28308 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
DESCRIPTION
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrator access is required. The impact is lower in Windows deployments.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.