EXPOSURES › CVE-2026-28317
CVE-2026-28317
CRITICAL
DETAIL
SourceNVD · cve
Published2026-07-21
CVSS9.1
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-28317 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
DESCRIPTION
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires domain administrator access. The impact is lower in Windows deployments.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.