CVE-2026-28304: SolarWinds Serv-U Remote Code Execution Vulnerability
SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as root. The impact is lower in Windows deployments.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SolarWinds Serv-Uto a version that resolves this vulnerability.Fixed in 2026.3
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28304?
CVE-2026-28304 has a severity rating of 9.1, classified as critical.
How do I fix CVE-2026-28304?
To fix CVE-2026-28304, update SolarWinds Serv-U to the latest version provided by the vendor.
What type of attack does CVE-2026-28304 facilitate?
CVE-2026-28304 facilitates remote code execution attacks, allowing attackers to execute arbitrary code as root.
Is CVE-2026-28304 present in both Windows and Linux deployments?
CVE-2026-28304 is present in SolarWinds Serv-U installations, but the impact is reported to be lower in Windows deployments.
What is the potential impact of CVE-2026-28304?
The potential impact of CVE-2026-28304 includes complete system compromise through remote code execution.