EXPOSURES › CVE-2026-28314
CVE-2026-28314
CRITICAL
DETAIL
SourceNVD · cve
Published2026-07-21
CVSS9.1
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-28314 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
DESCRIPTION
SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. User authentication is required. The impact is lower in Windows deployments.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.