EXPOSURES › CVE-2026-28309
CVE-2026-28309
CRITICAL
DETAIL
SourceNVD · cve
Published2026-07-21
CVSS9.1
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-28309 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
DESCRIPTION
SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. The impact is lower in Windows deployments.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.