EXPOSURES › CVE-2026-28313
CVE-2026-28313
CRITICAL
DETAIL
SourceNVD · cve
Published2026-07-21
CVSS9.1
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-28313 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
DESCRIPTION
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary account takeover. The impact is lower in Windows deployments.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.